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METHOD AND APPARATUS FOR PERFORMING PACKET 
CLASSIFICATION FOR POLICY-BASED PACKET ROUTING 

FIELD OF THE INVENTION 

The present invention relates generally to performing packet classification 

for policy-based packet routing. 

BACKGROUND 

Routers are devices that direct traffic in a network. Each router in the 
network has a route table that typically includes routing information to enable 
incoming packets to be forwarded or routed to their destination in the network. 
Some routers forward packets b ased only onjhe destination address indi cated in 
the packet . Other, more complex, routersforward or route packets based on_ 
policies defined, for examgle A by a network a dmiaisfrg^OT. . The latter routing 
schemes are commonly referred to as policy-bas ed routing. 

Policy-based routing can enable packets to be forwarded or routed in a 
network based on any number of criteria, including the source of the packet, the 
destination of the packet, the cost of forwarding the packet through different 
routes or paths in the network, or the bandwi dth available on different routes in 
the network. Policy-based routing can also be used to provide a certain Quality 
of Service (QOS) or Type ofService (TOS) to differentiated traffic in the network. 
For example, one orjmore of the ^ various fields (e.g., the TOS bits) in the header of 
an InternetProtocol (IP) packet can be used by policy-based routers to forward 
IP packets inanetwork. 

Each policy-based router implements a policy through the use ofrpute 
maps that define how to forward the packet in the network. Each route map 
statement or policy statement contains one or more match clauses and a set 
clause. Th e^match cl auses aregjgriesjQf .conditions .t hat are used todgtermineof 
anjncoming packet satisfies_^,patticula^ all of the match clauses of a 
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policy statement are satisfied, the set clause specifies how the router should 
forward the packet in the network. If one of the match clauses of a particula r 
policy statement is^n^^tisf^^tfien the policy-based router ; investigates^ 
subsequent policy^s.t atemert ts. 
5 Figure 1 shows exemplary processed policy information 100 of an 

incoming packet to a policy-based router. Policy information 100 includes 
several policy fields 102 including a destination address (DA) for the packet, a 
source address (SA) of the packet, protocol type (PTCL) such as those defined by 
for an IP packet header, TOS, and COST. Policy information 100 may be received 
10 by a policy-based router that implements a policy such as policy 200 shown in 
Figure 2. Policy 200 includes three separate policy statements 201 through 203. 
If policy information 100 satisfies the match clause (i.e., the "if" clause) of one of 
the policy statements, the set clause (i.e., the "then" clause) of that policy 
statement determines routing information for the packet in the network. For 
15 example, if the destination address of the incoming packet is DAI, the source 

address is SA1, and the TOS field of the packet is TOS1, then routing information 
RI2 should be selected. 

A policy-based router can use a conterrtaddress^ 
based system toimplemerit af iltering^pr classification fanctioi^ojtetermine 
20 whether an incoming packet matches a policyjrtatement Figure 3 shows one 
example of a system 300 that implements policy-based routing using a ternary 
CAM 302. The policy statements or policy words 201-203 are stored in separate 
rows in ternary CAM array 304. A ternary CAM array is one that is able to mask 
entries in a CAM array^ona bit-by-bitbasis. Ternary CAM array 304 has rows of 
25 CAM cells 305 for storing policy field information, and corresponding rows of 
mask cells 310 for storing mask data. Routing information RI0-RI2 is typically 
stored in an external memory 308 at addresses corresponding , to those at which 
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the respective_pplicy words 201-203 are stored in ternary CAM airay^O^ Each 
policy field that corresponds to a match clause for a given policy statement is 
munasked_by having i^corresponding mask bits set, for example, to a logic zero. 
Conversely, each policy field that does not have a match clause for a given policy 
5 statement is masked by having its corresponding mask bits set, for example, to a 
logic one. 

When an incoming packet is received by a policy-based router, it is 
processed to determine the policy field information. T he proce ^d|polic y f ield^ 
information j^p^ovi^d tp^yste^ 300 as policy search key 307 . F or each polic y 
10 statemen^^ m atches the policy s earch key, the 

correspondin gjnatch line MI^ MLn will be asserted and provide d t^^ ^^t y c ^te*? 

encoder 306) In response to the match lines, priority encoder 306 outputethe ^ UJ ^ 
address of the highest priority.matching entr y in CAM array 304 to HPMjms ^ ' 

4^ * 



312,_JLthere is more than one matching policy statement in CAM array 304,_ 
15 priority encoder 306 determines that the highest priorij^matching.i^licy_ 1 ' 
statement js jhe one s tored at the lowestlogical address.of CAM array3^.-For 
example, as shown in Figure 3, if CAM array 304 is loaded with policy statement 
203_ataddr^ss_zero^(i.e., the lowest logical address), statement 202 at address one, 
and statement 201 at address 2, and a policy search key of DAI, SA1, PTCL1, 
20 TOS1, COST1 is provided to CAM array 304, then each of policy statements 201- 
203 is identified as a matchjan match lines ML0-ML2, respectively. Priority 
encoder 306 outputs(addresszero on the HPM bus t o select route information RI2 



fr om address zero m^memory 308. 

Because priority encoder 306 determines the highest priority matching 
25 location based on pn^^tejm^ assi gnments, policy statements 

201-203 are preordered or prioritized such that higher_ priorit y polic yistateirierit& 
are stored in lower logical addresses of CAMarra y 304 th an lower priority policy 
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statements. A policy statement has a higher priority than another policy 

statement when the roxitej^ormation for the first polic y stat ement is to be 

selected over the seeoncLpolic y statement even though both policy statements 
may match^the policy search keyj^e.g., with masking). The prioritizing of the 
5 policy statements is typically performed by table management hardware and/ or 
software^vhich adds overhead to the router. 

If the table is not prioritized correctly, then an incorrect route may be 
selected for the incoming packet. Figure 4 shows an example in which policy 
statement 201 is incorrectly prioritized such that it, rather than policy statement 

10 203, is loaded into the lowest logical address. In this example, when policy 

search key 307 is provided to CAM array 304, priority encoder 306 still provides 
address zero on HPM bus 312. This causes, however, route information Rio to be 
selected in memory 308 rather than the desired route information Rh associated 
with higher priority policy statement 201. It would be desirable to load policy 

15 statements into a CAM array without having to preorder the statements 
according to their respective priorities. 

^ When a policy is changed by adding a new policy statement that has a 

( 

\ higher (or equal) priority tha n at le ast one of the policy statem ents already stored 

\ 

\ in CAM array 304, t he table management hardware and software needs to 
20\ reg rioritize o r jg order all or part of CAM array 3 04. This is typically 

accomplished by reloading the CAM array with a new prioritized group of 
policy statements. This can add significant overhead to the router (e.g., delay 
and additional hardware and software) to change even just one policy statement 
in a given policy. If the table is not reloaded, CAM 302 may cause an incorrect 
25 route to be selected from memory 308. For example, Figure 5 shows that a new 
policy statement 204 is loaded into the next free address (i.e., address three) of 



CAM array 304 without reprioritizingand reloading CAM array 304. Route 
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information Rh, corresponding to policy statement 204, is loaded into a 
corresponding address in memory 308. If policy statement 204 has a priority 
greater than that of 201, 202, or 203, then a search with policy search key 307 will 
not correctly identify policy statement 204 during a compare operation on CAM 
5 array 304. Policy statement 203, rather, will be identified as the higher priority 
statement, and route information Rh will be selected. It would be desirable to be 
able to add a new policy statement to a policy without reloading the CAM array 



storing the policy statements. 
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SUMMARY OF THE INVENTION 

A method and apparatus for performing a c lassification orj iltering 

function for polic y-based packet^outin g^n a digital signal processor (DSP) is 

disclosed. For one embodiment, the digital signal processor includes a policy ^ { • 

5 statement table for storing policy statements. The policy statement table may be ^ ^ 

stored in a t ernar y CAM array that stores the policy statements an d associat ed 

mask data. Each policy statement has associated with it a priority n umber Jha t v 

indicates the priority of th e policy statement relative to_other.pQlicy^st atements 7)(^ 

The priority numbers are separately stored in a priority index table. The priority — 

10 index table includes priorit YTogic that^d gtgg^ 

numb er from an^ that match aninc oming packet 

f durmg a classification or filter operation . The priority logic also identifies the f 7 * 1 *° f ^^^^^s ; 

location in the priority index table of the most significant priority number. The *~ fiex crM ifjJ ^ 
■ tvV^, j -jt^ 

most significant priority number may be the priority number with the lowest or^ vwair f**/^*^ #~ 
15 highest numerical value. The identified location in the priority inde x table man b e 
^ use d to acc ess associated, ro ute ^ in a roufe^^ "A 

memory array located external to, or on t he D SP. When the route memory array 
is externaltcTthe DSP, the DSP may include an encoder to encode the identified ^ 

^\ " ' f^yiiw 

locationjn the^pnorit^ index table into an address f or-the^roirte memory^ 
^ 20 \The DSP configuration obviates preloading the polic v statements in the 

/ polic y statement table in a pred^ern^ Instead, the priority logic ^'N^^^^^ 

determine|the most significant priority number|frqr^^ 

statements^^ard^^ the order in which the policy statements ar estored in _ 
\ thetable. This can reduce the hardware and/ or software needed for table 
25 management of the table, and can increase the performance of a router 
incorporating the DSP. 



-7- 



002489.P015 



In addition, ne w policy statements can be a dded at any location in the 
policy statement table, and as sociated priority numbe rs loaded into 
corresponding locations in the priority index table. If a new policy statement has 
a priority that is greater than or equal to a priority of a policy statement already 
5 stored in the policy statement table, the priority number of the previous ly stored 
policy_ statement ma y be updated to accommodate the new policy jtatement. 
Similarly, when a policy statement is removed (i.e., invalidated or overwritten) 
from the policy statement table, the priority numbersjof the previously stored 
lower priority policy statements may be updated. The updating functions can be 
10 performed by the priority logic in the priorit y index table , or by inequality 

circuits in the priority indgy tafolp, The updating functions can be performed 

,~ r 1 a 

! *f without the need to physically reorder the policy statements in the policy 

1 J -~~"(^/53 i T : ~ ^^V^m^c^^V)*- ~ ----- • 

J3 statement table, or to physically reorder the priority numbers in the priority 

M index table. This also can reduce the hardware and/ or software needed for table 

□ 15 management of the policy statement table, and can increase the performance of a 

□ router incorporating the DSP. 
The DSP can also be used in other non-networking applications. For 

example, the DSP can be used to process if -then-else functions in other 
applications. 

20 Other objects, features, and advantages of the present invention will be 

apparent from the accompanying drawings and from the detailed description 
that follows below. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The features and advantages of the present invention are illustrated by 
way of example and are by no means intended to limit the scope of the present 
invention to the particular embodiments shown, and in which: 
5 Figure 1 is an example of policy information; 

Figure 2 is an example of a policy having policy statements; 

Figure 3 is an example of storing a policy in a conventional ternary CAM; 

Figure 4 is an example of storing a particular policy in a conventional 
ternary CAM and comparing a search key with the policy; 
10 Figure 5 is another example of storing a particular policy in a conventional 

ternary CAM and comparing a search key with the policy; 

Figure 6 is one embodiment of a classification system for a policy-based 

router; 

Figure 7 is one embodiment of performing the classification operation for 
15 the system of Figure 6; 

Figure 8 is one example of performing the classification operation on a 
particular policy stored in the CAM array of Figure 6; 

Figure 9 is one embodiment of reading or writing a policy statement based 
on a priority number stored in the priority memory of Figure 6; 
20 Figure 10 is one embodiment of the priority index table of Figure 6; 

Figure 11 is another embodiment of the priority index table of Figure 6; 

Figure 12A is one embodiment of two rows of the priority index table of 
Figure 11; 

Figure 12B is another embodiment of two rows of the priority index table 
25 of Figure 11; 

Figure 13 is one example of determining the most significant priority 
number stored in the rows of the priority index table; 
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Figure 14 is one embodiment of a compare circuit and an isolation circuit 
for the priority logic element of Figure 11; 

Figure 15 is another embodiment of a compare circuit and an isolation 
circuit for the priority logic element of Figure 11; 

Figure 16 is another example of determining the most significant priority 
number stored in the rows of the priority index table; 

Figure 17 is another embodiment of the priority index table of Figure 6 
including inequality circuits; 

Figure 18 is one example of a policy stored in the digital signal processor 
of Figure 17; 

Figure 19 is one example of loading a new policy statement into the digital 
signal processor of Figure 18; 

Figure 20 is another example of a policy stored in the digital signal 
processor of Figure 17; 

Figure 21 is one example of loading a new policy statement into the digital 
signal processor of Figure 20; 

Figure 22 is one embodiment of the rows of the priority index table of 
Figure 17, in which the priority memory locations are configured as counters; 

Figure 23 is one embodiment of an inequality circuit and counter of Figure 

22; 

Figure 24 is one example of determining whether a new number is greater 
than or equal to priority numbers stored in the priority memory of Figure 17; 

Figure 25 A is one embodiment of a compare circuit of Figure 24; 

Figure 25B is another embodiment of a compare circuit of Figure 24; 

Figure 26 is one example of determining whether a new number is less 
than or equal to priority numbers stored in the priority memory of Figure 17; 

Figure 27A is one embodiment of a compare circuit of Figure 26; 
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Figure 27B is another embodiment of a compare circuit of Figure 26; 

Figure 28 is one embodiment of a process of deleting or invalidating 
policy statements and their associated priority numbers from the digital signal 
processor of Figure 17; 

Figure 29 is one embodiment of priority index table of Figure 17; 

Figure 30 is another embodiment of priority index table of Figure 17; 

Figure 31 is one embodiment of an inequality circuit element, a priority 
logic element and a memory element of Figure 17; 

Figure 32 is another embodiment of an inequality circuit element, a 
priority logic element and a memory element of Figure 17; 

Figure 33 is another embodiment of the priority index table of Figure 6 
including a decrement circuit and storing a policy; 

Figure 34 is one example of loading a new policy statement into the digital 
signal processor of Figure 33; 

Figure 35 is one embodiment of a row of the priority index table in Figure 

33; 

Figure 36 is one example, of determining whether a new number is greater 
than or equal to priority numbers stored in the priority memory of Figure 33; 

Figure 37 is one embodiment of compare circuit and an isolation circuit for 
a priority logic element of Figure 35; 

Figure 38 is one example, of determining whether a new number is less 
than or equal to priority numbers stored in the priority memory of Figure 33; 

Figure 39 is a block diagram of one embodiment of depth cascading 
digital signal processors; 

Figure 40 is a block diagram of one embodiment of a digital signal 
processor including cascade logic; 
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Figure 41 is a block diagram of one embodiment of the cascade logic of 
Figure 39; and 

Figure 42 is one example of processing Internet protocol addresses based 
on a classless inter domain routing scheme in the digital signal processor of 
Figure 6. 
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DETAILED DESCRIPTION 

In the following description, for purposes of explanation, specific 
nomenclature is set forth to provide a thorough understanding of the present 
invention. However, it will be apparent to one skilled in the art that these 
5 specific details may not be required to practice the present invention. In other 
instances, well known circuits and devices are shown in block diagram form to 
avoid obscuring the present invention unnecessarily. Additionally, the 
interconnection between circuit elements or blocks may be shown as buses or as 
single signal lines. Each of the buses may alternatively be single signal lines, and 

10 each of the single signal lines may alternatively be buses. Additionally, the 
prefix symbol "/" or the suffix "B" attached to signal names indicates that the 
signal is an active low signal. Each of the active low signals may be changed to 
active high signals as generally known in the art. 

A method and apparatus for performing a classification or filtering 

15 function for policy-based packet routing in a digital signal processor (DSP) is 
disclosed. For one embodiment, the digital signal processor includes a policy 
statement table for storing policy statements. The policy statement table may be 
stored in a ternaryCAMarray that stores the policy statements and associated 

t: ■ ' 

mask data. Each policy statement has associated with it a priority number that 
20 indicates the priority of the policy statement relative to other policy statements. 
The priority numbers are separately store d in a priorit^ Mndex table. The priority 
index table includes priority logic that determines the most significant priority 
number from among the policy statements that match an incoming packet 
during a classification or filter operation. The priority log ic also identifies J he 
25 location in the priority:inde>^able of t he most si gnificant priori^number. The 

C ™ ' 

most significant priority number may be the priority number with the lowest or 
highest numerical value. The identified location in the priority index table can be 
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used to access associated route information or other information stored in a route 
memory array located external to, or on the DSP. When the route memory array 
is external to the DSP, the DSP may include an encoder to encode the identified 
location in the priority index table into an address for the route memory. 
5 The DSP configuration obviates preloading the policy statements in the 

policy statement table in a predetermined order. Instead, the priority logic 
determines the most significant priority number from among matching policy 
statements regardless of the order in which the policy statements are stored in 
the table. This can reduce the hardware and/ or software needed for table 

10 management of the table, and can increase the performance of a router 
incorporating the DSP. 

In addition, new policy statements can be added at any location in the 
policy statement table, and associated priority numbers loaded into 
corresponding locations in the priority index table. If a new policy statement has 

15 a priority that is greater than or equal to a priority of a policy statement already < 
stored in the policy statement table, the priority number of the previously stored 
policy statement may be updated to accommodate the new policy statement. 
Similarly, when a policy statement is removed (i.e., invalidated or overwritten) 
from the policy statement table, the priority numbers of the previously stored 

20 lower priority policy statements may be updated. The updating functions can be 
performed by the priority logic in the priority index table, or by inequality 
circuits in the priority index table. The updating functions can be performed 
without the need to physically reorder the policy statements in the policy 
statement table, or to physically reorder the priority numbers in the priority 

25 index table. This also can reduce the hardware and/ or software needed for table 
management of the policy statement table, and can increase the performance of a 
router incorporating the DSP. 
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The DSP can also be used in other non-networking applications. For 
example, the DSP can be used to process if -then-else functions in other 
applications. 

Classifying or Filtering Policy Statements 

5 Figure 6 shows one embodiment of a classification or filtering system 600 

for a policy-based router. System 600 includes DSP 602 and route memory 614. 
DSP 602 includes policy statement table 604, priority index table 606 and encoder 
612, and may be an integrated circuit component formed on a single 
semiconductor substrate. 

10 For this embodiment, policy statement table 604 is stored in a ternary 

CAM array that stores policy statements or policy words. Ternary CAM array 
604 has rows of CAM cells 605 for storing policy field information PF1-PFX, 
where X is any number. Each policy field PF1-PFX can include any policy 
information including DA, SA, PTCL, TOS, and COST, or any other type of 

15 policy field to assist in the classification or filtering of the policy statement to 
provide a certain Quality of Service (QoS), Class of Service (CoS), and the like. 
Each policy field may include any number of bits. Additional information 
associated with each policy field may be stored in one or more additional binary 
or ternary CAM cells or other types of memory cells disposed in each row of 

20 CAM 604. Ternary CAM 604 also has rows of mask cells 607 for storing mask 
data Ml-MX corresponding to each row of policy fields 605. Global masks (not 
shown) may be used to mask entire columns in CAM array 604 as generally 
known in the art. For alternative embodiments, CAM array 604 may be any 
other type of CAM including a binary CAM, or any other type of memory to 

25 store policy statements to be compared with processed policy information of an 
incoming packet. 
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Ternary CAM array 604 can be any ternary CAM array that is capable of 
locally masking each entry on a bit-by-bit basis. Each policy f ield t hat 
corresponds t o_amatch clause fara g iy egy^lic y statem ent.will bgji nmasked b y 
haying itsjc orresponding ma^bits^sjet for example, to a.jogkzerojor, - - 

5 alternatively, a logic one). Conversely, each policy field that does not have a 
match clause for a given policy statement will be masked by having its 
corresponding mask bits set, for example, to a logic one (or, alternatively, a logic 
zero). As each policy field, and/ or individual bits within a policy field, can be 
masked, DSP 602 also supports rule and route aggregation. That is, DSP 602 
10 supports ranges of addresses or policy field information. 

Each policy statement loaded intojternary CAM arra y^604 has as sociated, 
with it a priority number Po-Pz and route^information RIo-RIn-i. The priority 
number indicates the priority of the policy statement relative to other policy 
i=£ statements in a given policy. The policy numbers may be assigned by a user of 

□ 15 DSP 602 including, for example, a network administrator or the router itself. The 

□ priority numbers Po-Pz are separately stored at locations 608o-608n-i, 
|l respectively, of priority memory 608 of priority index table 606. Route 

% information RIo-RIn-i for the particular policy statements are stored at locations 

^ 614o-614n-i, respectively, in route memory 614. T he route information m ay 

20 include, for example, forwarding or next hop i irformatio n, authentication 

. ^ * _ ^ 

infonnation, QOS, TOS, time to live information or other p acket filterin gjind 
class ification info rmation for an incoming packet to the router incorporating 
system 600. A policy statement, its priority number, and its route information are 
each stored at the corresponding addresses in each of their respective memory 
25 arrays. 

Priority memory 608 and route memory 614 may each be any type of 
memory array including volatile, non-volatile, random access memory (RAM), 
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and/ or read only access memory (ROM). For one embodiment, priority memory 
608 comprises a CAM array. 

Priority memory 608 may be n bits wide to accommodate Z=2 n priority 
numbers, where n is any number. The number of addressable locations N in 
5 priority memory 608 may be greater than, less than, or equal to Z. For one 

example, priority memory 608 may be 20 bits wide to accommodate up to 2 20 or 1 
Meg (i.e., 1,048,576) priority numbers. 

The priority numbers may be assigned in ascending priority order such 
that zero is the highest priority number and 2 n -l is the lowest priority number. 

10 Alternatively, the priority numbers may be assigned in descending priority order 
such that 2 n -1 is the highest priority number and zero is the lowest priority 
number. Each priority number may be assigned so as to identify the priority of 
each policy statement relative to other policy statements. For one embodiment, 
the priority numbers may be assigned consecutively. For example, the highest 

15 priority policy statement can be assigned the highest priority number (e.g., zero 

or 2"-!), the next lower priority policy statement can be assigned the next lower 

priority number (e.g., one or 2 n -2), and so forth. For another embodiment, gaps 

may be left in the priority number assignments to allow for the addition of future 

priority numbers associated with new policy statements. 

20 Priority index table 606 also includes priority logic 610 that compares the 

' " " fU4iA ; 

priority numbers with each otiherforj^ n . f ;X £ 

match an incoming packet. Priority logic 610 identifies the mostsig ntficant ^ JT 

priorjjt}^ PNUM in memory_608 jro mamong the compared priorit y \ *~ ^ ^O* 1 0 

numbers, and further identi fies the loca tion of PNUM i n priorit y memory 608. 

25 PNUM has the lowest numerical value when the priority numbers are assigned 

ascending priority order, and PN^U|yl has the highes t numerical value when the 

priority numbers are assigned in descending priority order. Priority logic 610 
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may also output PNUM from DSP 602. The identified location of PNUM in the 
priority memory is provided on internal address lines IADo-IADn-i to encoder 
612. For one example, one of IADo-IADn-i is asserted to indicate the location in 
priority memory 608 of PNUM from among the compared priority numbers. 
This location also corresponds to the location of the highest priority matching 
policy statement in ternary CAM array 604. 

T he address of the i dentified location of the hi ghest priority matching 
policy statonent in Jternary: C AMarray 604 is determinedAy^encoder^l^ and 
output toHPM bus 61 & The encoded address can then be used to access the 
corresponding route information from memory 614. Encoder 612 may be any 
encoding logic that takes the ir rforma tion^^ 

generates an encoded address. For one embodiment, encoder 612 is a ROM. 



For another embodiment, route memory 614 may also be included w ithin 
DSP 602. For this embodiment, encoder 612 may be omitted and route memory 
614 may be accessed directly by internal address lines IADo-IADn-i. 

Figure 7 summarizes the classification or filtering function 700 (i.e., search 
or compare operation) performed by DSP 602 for an incoming packet according 
to a policy stored in ternary CAM 604. An incoming packet reived by a policy- 
based router incorporating system 600 is initially processed to determine the 
R2^YJi^4-? l ^ 0 SS5ii2Q^ The P°li c y field information is provided to system 600 
as policy search key 609. At step 702, the policy fields of policy search key 609 are 
compared with the policy statements stored in ternary CAM array 604. F or ea ch 
policy statement that matches the policy search key, the coreespondm^ 
line MLo-MLN£isjisserted. If no match is found, then the process stops at step 



At step 706, priority logic 610 d etermines PNUM a nd i dent ifies its location 
in priority memory 608. The identified location is provided on internal address 
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lines IADo-I ADn-i to encoder 612. At step 708, encode r 612 determines th e 

■ — > 

add ress of the identified locat ion in p riorit y i ndex table 606. This encoded 
address is also the logical address of the highest priority matching policy 
statement in ternary CAM array 604. Encoder 612 outputs the encoded address 
5 to HPM bus 616. The encoded address can then be used at step 710 to access the 
corresponding route information in memory 614. Steps 708 and/ or 710 may be 
omitted when encoder 612 is removed from DSP 602, and priority logic 610 may 
directly access the route information in memory 614. 

For another embodiment, IADo-IADn-i are provided to CAM array 604 to 
10 access the highest priority matching policy statement, which may then be read 
from DSP 602. Alternatively, HPM bus 616 may be provided to CAM array 604 
(e.g., through a decoder) to access the highest priority matching policy statement. 

Figure 8 shows one example in which policy statements 201, 202, and 203 
from Figure 2 are stored at locations 604o, 604i, and 6042 (i.e., addresses 0, 1, and 
□ 15 2), respectively, of ternary CAM array 604. The corresponding priority numbers 
2, 1, and 0 are stored at locations 608o, 608i, and 6082, respectively, in memory 
608. Additionally, the corresponding route information Rio, RIi, and Rh, are 
stored at locations 61 4o, 61 4i, and 6142, respectively of route memory 614. The 
policy statements and priority numbers are written into their respective 
20 memories using conventional write circuits, counters, and/ or address decoders, 
etc. (not shown). 

For this embodiment, the priority numbers have been assigned in 
ascending priority order such that policy statement 203 is identified as the 
highest priority policy statement by being assigned priority number 0, the lowest 
25 numerical value; policy statement 201 is identified as the having the lowest 
priority policy statement by being assigned priority number 2, the highest 
numerical value; and, policy statement 202 is identified as having a priority 
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greater than that of policy statement 201, but less than that of policy statement 
203, by being assigned priority number 1. 

For an alternative embodiment, the priority numbers may be assigned in 
descending priority order such that policy statement 201 is identified as the 
5 highest priority policy statement by being assigned priority number 2, the 

highest numerical value; policy statement 203 is identified as having the lowest 
priority policy statement by being assigned priority number 0, the lowest 
numerical value; and, policy statement 202 is identified as having a priority 
greater than that of policy statement 201, but less than that of policy statement 
10 203, by being assigned priority number 1. 

The process of determining the route information for policy search key 
ifl 609 is illustrated with the aid of Figure 7. At step 702, the policy fields of policy 

□ search key 609 are compared with the policy statements stored in ternary CAM 

[I array 604. In this example, the policy search key has policy fields of DA=DA1, 

3 15 SA=SA1, FTCL=PTCL1, TOS=T051, and COST=COSTl. CAM array 604 
determines that e ach of the policy statem^^^^OS^as masked by their 
J: respective mask data, matches policy search key 609. In response, each of match 

J lines ML0-ML2 is asserted. 

0 At step 706, priority_logic 610 compargg / jv ith each other , priority numbers^ 

20 0 / J^jmd2 ass ociated with matchin g policy_statem ents 2 Q3,^02,.ancL20JL 

respectively. Priority logic 610 determines that priority number 0 is the most 
significant priority number, asserts I AD2, and de-asserts the other internal 
address lines. Encoder 612 encodes the internal address information, at step 708, 
and generates an external address of 2 on HPM bus 616. The external address 
25 can be used to access route information RI2 stored at address two in route 
memory 614. 



-20- 



002489.P015 



In contrast to the conventional system shown in Figure 4, DSP 602 is able 
to identify the highest priority matching policy statement stored in ternary CAM 
array 604 regardless of where the polic y statements are stored in CAM arra y_604. 

The process illustrated in Figure 7 identifies the location in priority 
memory 608 of the most significant priority number from among the compared 
priority numbers. Once this location is identified, the priority number stored at 
theidentif ied location can be read out from DSP 602 by a read circuit (not 
shown), or a new priority number can be written into that location by a write 
circuit (not shown). In the former case, the user of the DSP (e.g., a network 
administrator or the policy-based router itself) can determine what priorities, 
have been assigned to policy statements alr.ead\Lstored in CAM arravi6 04. In the 
latter case, priority numberscan b e jygdated by the usej^or^alread y storec^policy 
statemgnts. This provides the user with flexibility in the control and 
management of the policy statements stored in DSP 602. 

For added flexibility, the user can read a policy statement (e.g., one or 
more of the policy fields and/ or one or more of the corresponding mask data) 
based on priority numbers already store d in the priority memory, or write a new 
policy statement for a priority number already stored in the priority memory. 
For these embodiments, priority memory 608 may be a CAM. For an alternative 
embodiment, each priority number may be separately compared by a 
comparison circuit with an externally applied priority number. 

Figure 9 shows one embodiment of a process 900 for reading or writing a 
policy statement based on a priority number already stored in the priority— 
memwyr^At step 902, an external priority number is compared with the priority 
numbers stored in priority memory 608. The valid priority numbers stored in 
memory 608 may be indicated by one or more validity bits (not shown) stored in 
CAM memory 604 or memory 608. If there is no match, or more than one match 
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(i.e., a multiple match), then the process stops at step 904. Alternatively, a 
priority encoder circuit can be coupled to priority index table 606 to select one of 
the multiple matches for step 906. 

If there is a single match, then an indication of the matching location is 
5 provided on lines IADo-IADn-i to encoder 612 at step 906. When priority 
memory 608 is implemented as a CAM, I ADo-I ADn-i may be the match lines 
associated with each priority number storage location. At step 908, encoder 612 
determines the address of the matching location in priority memory 608 and 
provides this address on HPM bus 616. This address is also the address of the 
10 corresponding policy statement in CAM array 604. At step 910, the encoded 
address can then be provided to CAM array 604 (e.g., through a decoder), and 
\Q the policy statement stored at that address either read from DSP 602, or 

□ overwritten. For an alternative embodiment, IADo-IADn-i may be provided 

Lx directly to CAM array 604 to access the desired policy statement and the process 

g t 15 may omit step 908. Additionally, a new priority number can be written to 
!!« priority memory 608 at the address determined in step 910. 

: j! With reference again to Figures 6 and 7, priority i ndex tab lejSO^s tores 

^ priority num priority logic 610 determines the 

most significant priority number among those associated with policy statements 
20 that match policy search key 609. Figure 10 shows DSP 1000 that includes 

priority index table 1001 that is one embodiment of priority index table 606. In 
this embodiment, CAM array 1002 is one embodiment of priority memory 608, 
and priority logic 1004 is one embodiment of priority logic 610. 

DSP 1000 performs the filtering function of Figure 7 as follows. At step 
25 702, a policy search key is compared with the policy fields stored in CAM array 
604 and match lines MLo-MLn-i are asserted for the matching locations. The 
asserted match lines access the associated priority numbers stored in CAM array 
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1002. For one embodiment, MLo-MLn-i are coupled to corresponding word lines 
of the rows of CAM cells in CAM array 1002. In response to the asserted match 
lines, CAM array 1002 provides the selected priority numbers to priority logic 
1004 over bus 1006 to determine which priority number is the most significant 
priority number. The priority numbers may be provided one at a time over bus 
1006, or in parallel. 

Priority logic 1004 includes one or more compare circuits to compare the 
priority numbers and determine the most significant priority number. For one 
embodiment, priority logic 1004 includes a compare circuit and a register. The 
first priority number provided on bus 1006 is stored in the register and 
compared with the second priority number. Each subsequent priority number 
provided over bus 1006 is then compared and the result (either greater than or 
less than) is then stored in the register. This process continues until no more 
priority numbers are provided over bus 1006. For another embodiment, multiple 
compare circuits may be provided to compare multiple priority numbers at the 
same time to generate the most significant priority number. 

Once the most significant priority number is determined, it is provided 
over bus 1008 to CAM 1002 and searched against the stored priority numbers to 
determine where it is located in CAM array 1002. The indicated location is 
provided on internal address lines IADo-IADn-i, which may correspond to the 
match lines of CAM array 1002. Steps 708 and 710 may then be performed as 
previously described above. 

Figure 11 shows DSP 1100 that includes priority index table 1101 that is 
another embodiment of priority index table 606. In this embodiment, priority 
memory 608 and priority logic 610 are merged together on a bit-by-bit basis to 
form priority index table 1101. The priority memory includes memory elements 
1102 that each store one bit of a priority number for a given row. Each memory 
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element may be any type of storage mechanism including volatile or non-volatile 
memory cells. The priority logic includes priority logic elements 1104. Each 
priority logic element 1104 is associated with, or corresponds to, one of the 
memory elements 1102 such that columns 1106o-1106n-i of priority index table 
1101 have a memory element/ priority logic element pair for each of its rows. 
Each priority logic element 1104 effectively compares the priority number bit 
stored in its associated memory element 1102 with the priority number bits 
stored in every other memory element of its column to determine one of bits 
PNUMo-PNUMn-i for the most significant priority number. Bits PNUMo- 
PNUMn-i comprise the most significant priority number from among the policy 
statements that match a policy search key. 

Figure 12A shows priority index table 1200 that is one embodiment of two 
rows of priority index table 1101. For this embodiment, each priority logic 
element 1104 includes a compare circuit 1206 and an isolation circuit 1204. Each 
compare circuit 1206 is connected in a wired-OR configuration with the other 
compare circuits in its respective column by one of priority signal lines 1208o- 
1208 n -i. Each priority signal line may be pre-charged towards a power supply 
voltage (or any other predetermined voltage) by a pre-charge circuit 1202. Each 
compare circuit 1206 may be any digital or analog compare circuit that, when 
executing step 706 of Figure 7, effectively compares the priority number bit 
stored in its respective storage element 1102 with the priority number bits stored 
in every other storage element 1102 of the same column. Additionally, each 
compare circuit monitors the comparison result of the more significant priority 
number bits through the logical states of match line segments 1210. Match line 
segments 1210 are coupled between match lines MLo-MLn-i and internal address 
lines IADo-IADn-i by isolation circuits 1204. The isolation circuits isolate the 
comparison results generated for less significant priority bit locations from 
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affecting the comparison results generated for more significant priority bit 
locations. The isolation circuits may also work together with the comparison 
circuits to control the state of the match line segments. 

The operation of priority index table 1200 can be illustrated with an 
example shown in Figure 13 and with the aid of Figure 7. In this example, 
priority index table 1200 comprises a 2x4 matrix of rows and columns. For other 
embodiments, any numbers of rows and columns can be used. Row zero stores 
priority number 0110 having the decimal equivalent of the number 6, and row 
one stores priority number 0101 having the decimal equivalent of the number 5. 
For this example, each of row zero and row one of CAM array 604 have policy 
statements that match the policy search key such that match lines MLo and MLi 
are asserted (step 702). Also, for this example, the priority numbers are stored in 
ascending priority order such that 0101 is the more significant priority number 
between 0101 and 0110. 

At step 706, compare circuits 12060,0-12063,1 determine that 0101 is the 
more significant priority number PNUM, and cause IADi to be asserted to 
indicate that 0101 is stored in row one of the priority index table. Compare 
circuits 12060,0-12063,1 determine that PNUM is 0101 as follows. The most 
significant bit PNUM3 is resolved first. When any memory element 1102 stores a 
logic zero and the corresponding match line segment 1210 is asserted, the 
corresponding priority signal line 1208 is discharged. Thus, each of compare 
circuits 12063,1 and 12063,0 discharge signal line 12083 such that PNUM3 is a logic 
zero. Additionally, compare circuit 12063,i compares the state of priority signal 
line 12083 with the priority number bit stored in 11023,i, and determines that both 
have the same logic state. This causes compare circuit 12063,1 not to affect the 
logical state of match line segment 121 024 such that match line segment 12102,1 
has the same logic state as match line segment 12103,i (MLi). Similarly, compare 
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circuit 12063,0 compares the state of priority signal line I2O83 with the priority 
number bit stored in 11023,0 and determines that both have the same state. This 
causes compare circuit 12063,0 not to affect the logical state of match line segment 
12102,o such that match line segment 12102,0 has the same logic state as match line 
5 segment 12103,o (MLo). 

The next most significant bit PNUM2 is then resolved. Memory elements 
1102 that store a logic one do not discharge their corresponding priority signal 
lines 1208. Since memory elements 11022,i and 11022,0 both store logic one states, 
signal line 12082 remains pre-charged such that PNUM2 is a logic one. 
10 Additionally, compare circuit I2O624 compares the state of priority signal line 
12082 with the priority number bit stored in 11022,i, and determines that both 
ifl have the same logic state. This causes compare circuit 12062,i not to affect the 

□ logical state of match line segment 1210i,i such that match line segment 1210i,i 

U has the same logic state as match line segment 12102,1. Similarly, compare circuit 

*- i 
•a 

□ 15 12062,o compares the state of priority signal line I2O82 with the priority number 
j 3 bit stored in 11022,0 and determines that both have the same logic state. This 

causes compare circuit 12062,o to not affect the logical state of match line segment 
12101,0 such that match line segment 1210i,o has the same logic state as match line 
segment 12102,o. 

20 PNUMi is resolved next. Since memory element 1102i,i stores a logic zero 

and match line segment 1210i,i is asserted, compare circuit 1206i,i discharges 
priority signal line 1208i. This causes PNUMi to be a logic zero. Additionally, 
compare circuit 1206i,i compares the logic zero state of priority signal line 1208i 
with the logic zero stored in 1102i,i and allows match line segment 1210o,i to 
25 have the same state as match line segment 1210i,i. Compare circuit 1206i,o, 

however, compares the logic zero on priority signal line 1208i with the logic one 
stored in memory element 11021,0, and de-asserts match line segment 1210o,o. 
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When a match line segment is de-asserted, all subsequent compare circuits for 
that row will de-assert the remaining match line segments of the row such that 
the corresponding internal address line IAD will be de-asserted. When IAD is 
de-asserted for a particular row, this indicates that the most significant priority 
5 number is not stored in that row. Additionally, when the remaining match line 
segments are de-asserted for a row, the compare circuits for that row do not 
discharge the remaining priority signal lines regardless of the logic states stored 
in the corresponding memory elements of that row. For example, compare 
circuit 1206o,o does not discharge priority signal line 1208o even though memory 

10 element 11020,0 stores a logic zero. Additionally, isolation circuits 12043,0, 12042,0, 
and 1204i,o isolate the de-asserted match line segment 12100,0 from match line 
segment 1210 3 ,o, 1210 2/ o, and 1210i /0 such that PNUMs, PNUM 2 , and PNUMi are 
not affected by the de-assertion of match line segment 1210o,o. 

Lastly, the least significant bit PNUMo is resolved. Compare circuit 1206o,i 

15 alone determines PNUMo since compare circuit 1206o,o can not discharge priority 
signal line 1208o. Since memory element 1102o,i stores a logic one and match line 
segment 1210o,i is asserted, compare circuit 1206o,i leaves priority signal line 
1208o pre-charged, and PNUMo is a logic one. Additionally, compare circuit 
1206o,i allows IADi to have the same state as match line segment 1210o,i. Since 

20 match line segment 1210o,i is asserted, IADi will be asserted indicating that the 
most significant priority number is stored in that row. 

Thus, when the processing of step 706 is completed, bits PNUM3-PNUM0 
indicate that the most significant priority number stored in the priority index 
table is 0101, and IADi is asserted identifying that 0101 is stored in row one. 

25 Any circuits may be used for compare circuits 1206 and/ or isolation 

circuits 1204 to implement the process illustrated above. Table 1 shows one 
example of a truth table for implementing each compare circuit 1206, where X 



-27- 



002489.P015 



(column) and Y (row) are any integers. Other truth tables may be used (and 
corresponding logic generated accordingly) including those that logically 
complement one of more or the signals indicated in Table 1. 



STATE 


1208 


1102 


1210x,y 


1210x-i,y 


0 


0 


0 


0 


0 


1 


0 


0 


1 


1 


2 


0 


1 


0 


0 


3 


0 


1 


1 


0 


4 


1 


0 


0 


0 


5 


1 


0 


1 


1 


6 


1 


1 


0 


0 


7 


1 


1 


1 


1 



Table 1 



Note that state 5 may not occur since priority signal line 1208 will not be a 
logic one when a memory element 1102 stores a logic zero and the corresponding 
match line segment 1210 is asserted to a logic one state. For other truth tables, 
state 5 may occur. 

Any logic or circuitry may be used to implement the truth table of Table 1. 
Figure 14 shows one embodiment of compare circuit 1206 n -i,o and isolation circuit 
1204n-i,o for implementing the truth table of Table 1. Compare circuit 1403 is one 
embodiment of compare circuit 1206 n -i,o, and isolation circuit 1401 is one 
embodiment of isolation circuit 1204n-i,o. The embodiment of Figure 14 may be 
used to implement all of the priority logic elements 1104 in the priority index 
table. 

Compare circuit 1403 includes inverter 1414, transistors 1406 and 1408 
connected in series between priority signal line 1208 n -i and ground, and 
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transistors 1410 and 1412 connected in series between match line segment 1210 n - 
2,0 and ground. N-channel transistor 1406 has its drain coupled to signal line 
1208 n -i, it gate coupled to match line segment 121011-1,0, and its source coupled to 
the drain of n-channel transistor 1408. Transistor 1408 has its gate coupled to 
5 receive the logical complement of the priority number bit (/D) stored in memory 
element 110211-1,0, and its source coupled to ground. N-channel transistor 1410 has 
its drain coupled to match line segment 121011-2,0, its gate coupled to signal line 
1208n-i via inverter 1414, and its source coupled to the drain of n-channel 
transistor 1412. Transistor 1412 has its gate coupled to receive the priority 

10 number bit (D) stored in memory element 1102 n -i,o, and its source coupled to 

ground. Any of transistors 1406, 1408, 1410, and 1412 can be replaced with other 
types of transistors and the logic adjusted accordingly. 

Isolation circuit 1401 includes inverters 1402 and 1404. For alternative 
embodiments, only one inverter may be used and the logic of the next compare 

15 circuit adjusted accordingly. For other embodiments, other isolation circuits 
such as one or more AND, OR, or XOR logic gates or pass gates may be used. 

Figure 15 shows another embodiment of compare circuit 1206 n -i,o and 
isolation circuit 1204n-i,o for implementing the truth table of Table 1. In this 
embodiment, the compare circuit and isolation circuit are merged into the same 

20 logic that includes transistors 1406 and 1408 configured as in Figure 14, inverter 
1501, NAND gate 1502, and AND gate 1503. NAND gate 1502 has one input 
coupled to signal line 1208 n -i via inverter 1501, and another input coupled to 
receive the priority number bit (D) stored in memory element 1102 n -i,o. AND 
gate 1503 has one input coupled to match line segment 1210 n -i,o, another input 

25 coupled to the output of NAND gate 1502, and an output coupled to match line 
segment 1210 n -2,o. 
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For the example described above with respect to Figure 13, the most 
significant priority number is the lowest number such that 0101 is the most 
significant number between 0101 and 0110. For another embodiment, the 
priority numbers are stored in descending priority order such that 0110 is the 
most significant priority number between 0101 and 0110. For this embodiment, 
compare circuits 12060,0-12063,1 determine that 0110 is the most significant 
priority number, and assert IADo to indicate that 0110 is stored in row zero of the 
priority index table. For this embodiment, as shown in Figure 16, inverters 1212a- 
1212o output the logical states of priority signal lines 1208 3 -1208 0/ respectively, as 
PNUM3-PNUM0. For other embodiments, inverters 1212s-1212o are not required. 
Compare circuits 1206o,o-1206 3/ i and isolation circuits 1204o,o-1204 3 ,i determine 
that 0110 is the highest priority number as follows. 

As in the previous embodiment, the most significant bit PNUM3 is 
resolved first. For this embodiment, memory elements 1102 that store a logic zero 
do not discharge their corresponding priority signal lines 1208. Since both of 
memory elements 1102m, and 11023,0 store logic zero states, signal line 1208 3 
remains pre-charged such that PNUM3 is a logic zero. Additionally, compare 
circuit 12063,1 compares the state of priority signal line 1208 3 with the priority 
number bit stored in 1102m and determines that both have different logical 
states. This causes compare circuit 11023,1 to not affect the logical state of match 
line segment 1210m such that match line segment 12102,1 has the same logic state 
as match line segment 1210 3 ,i. Similarly, compare circuit 1206 3 ,o compares the 
state of priority signal line 1208 3 with the priority number bit stored in 1102&0 
and determines that both have the different logical states. This causes compare 
circuit 11023,o to not affect the logical state of match line segment 1210*0 such that 
match line segment 1210 2 ,ohas the same logic state as match line segment 1210 3 ,o. 
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PNUM2 is resolved next. When any memory element 1102 stores a logic 
one and the corresponding match line segment 1210 is asserted, the 
corresponding priority signal line 1208 is discharged. Thus, each of memory 
compare circuits I2O624 and 12062,0 discharge signal line 12082 such that PNUM2 
5 is a logic one. Additionally, compare circuit I2O624 does not affect match line 
segment 1210i,i because memory element 11022,i and priority signal line 12082 
have different logic states. Thus, match line segment 12101,1 will have the same 
logic state as match line segment 121 024. Similarly, compare circuit 12062,0 does 
not affect match line segment 1210i,o because memory element 11022,o and 
10 priority signal line 12082 have different logic states. Thus, match line segment 
12101,0 has the same state as match line segment 12102,0. 

PNUMi is resolved next. Since memory element 1102i,o stores a logic one 
and match line segment 12101,0 is asserted, compare circuit 1206i,o discharges 
fas priority signal line 1208i. This causes PNUMi to be a logic one. Additionally, 

g 15 compare circuit 1206i,o compares the logic zero state of priority signal line 1208i 
with the logic one stored in 1102i,o and allows match line segment 1210o,o to have 
the same logic state as match line segment 1210i,o. Compare circuit 12061,1, 
however, compares the logic zero on priority signal line 1208i with the logic zero 
stored in memory element 11021,1, and de-asserts match line segment 1210o,i. As 
20 in the example of Figure 13, when a match line segment is de-asserted, all 

subsequent compare circuits for that row will de-assert the remaining match line 
segments for the row such that the corresponding internal address line IAD will 
be de-asserted. When IAD is de-asserted for a particular row, this indicates that 
the most significant priority number in not stored in that row. Additionally, 
25 when the remaining match line segments are de-asserted, the compare circuits 
for that row do not discharge the remaining priority signal lines regardless of the 
logic states stored in their corresponding memory elements of that row. For 
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example, compare circuit 1206o,i does not discharge priority signal line 1208o 
even though memory element 1102o,i stores a logic one. Additionally, isolation 
circuits 12043,1, 12042,1, and 12041,1 isolate the de-asserted match line segment 
1210 0/ i from match line segments 121034, 12102,1, and 1210i,i such that the PNUMs, 
PNUM2, PNUMi and are not affected by de-asserted match line segment 1210o,i. 

Lastly, the least significant priority number bit PNUMo is resolved. 
Compare circuit 1206o,o alone determines PNUMo since compare circuit 1206o,i 
can not discharge priority signal line 1208o. Since memory element 1102o,o stores 
a logic zero and match line segment 1210o,ois asserted, compare circuit 1206o,o 
leaves priority signal line 1208o pre-charged, and PNUMo is a logic zero. 
Additionally, compare circuit 1206o,o allows IADo to have the same logic state as 
match line segment 1210o,o. Since match line segment 1210o,o is asserted, IADo 
will be asserted indicating that the most significant priority number is stored in 
that row. 

Thus, when the processing of step 706 is completed, PNUM3-PNUM0, for 
this embodiment, indicate that the most significant priority number stored in the 
priority index table is 0110, and IADo is asserted identifying that 0110 is stored in 
row zero. 

Any circuits may be used for compare circuits 1206 and/ or isolation 
circuits 1204 to implement the process illustrated above for Figure 16. Table 2 
shows one example of a truth table for implementing each compare circuit 1206, 
where X (column) and Y (row) are any integers. Other truth tables may be used 
(and corresponding logic generated accordingly) including those that logically 
complement one of more of the signals indicated in Table 2. 
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STATE 


PNUM 


1102 


1210x,y | 1210x-i,y 
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1 
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0 
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0 


1 


1 


1 


4 


1 


0 


0 


0 
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1 


0 


1 


0 


6 


1 


1 


0 


0 


7 


1 


1 


1 


1 



Table 2 



Note that state 3 may not occur since PNUM will not be a logic zero when 
a memory element 1102 stores a logic one and the corresponding match line 
segment 1210 is asserted to a logic one state. For other truth tables, state 3 may 
occur. 

Any logic or circuitry may be used to implement the truth table of Table 2. 
For one embodiment, the compare circuit 1403 and isolation circuit 1401 of 
Figure 14 may be used. For this embodiment, transistor 1408 has its gate coupled 
to receive the priority number bit (D) stored in memory element 1102 n -i,o, and 
transistor 1412 has its gate coupled to receive the logical complement of the 
priority number bit (/D) stored in memory element 1102 n -i,o. Additionally, 
signal line 1208 n -i provides the logical complement of PNUM n -i. 

For another embodiment, the logic and circuitry of Figure 15 may be used 
to implement the truth table of Table 2. For this embodiment, transistor 1408 has 
its gate coupled to receive the priority number bit (D) stored in memory element 
1102^1,0/ and NAND gate 1502 has an input coupled to receive the logical 
complement of the priority number bit (/D) stored in memory element 1102 n -i,o. 
Additionally, signal line 1208 n -i provides the logical complement of PNUM n -i. 
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Figure 12B shows another embodiment of 1201o of the priority index table. 
For this embodiment, IADo is determined on signal line 1216 that is separate 
from the match line segments. As shown in Figure 12B, each match line signal 
line is coupled to a discharge circuit that includes an inverter-transistor pair (i.e., 
5 inverters 1212 n -i,o-1212o,o and corresponding transistors 1214 n -i / o-1214o,o) such that 
if any of the match line segments is discharged, then signal line 1216 is 
discharged to a low logic state. For other embodiments, other discharge circuitry 
may be used. Signal line 1216 is pre-charged to a high logic state by pre-charge 
circuit 1202. For an alternative embodiment, signal line 1216 may be driven 

10 directly by the match line segments. 

The previously described embodiments of system 600 of Figure 6 show 
that policy statements can be loaded into CAM array 604 in any order. When an 
incoming packet is received, DSP 602 can identify the address in CAM array 604 
of the highest priority policy statement that matches the policy information of 

15 the incoming packet. The identified address can then be used to access routing 
information stored in route memory 614. DSP 602 can perform this function 
without the user having to preorder the policy statements for entry into the 
CAM array. This can reduce the hardware and/ or software needed for table 
management of the CAM array, and can increase the performance of a router 

20 incorporating the DSP. 

DSP 602 can operate asynchronously or synchronously. When DSP 602 
operates synchronously, it receives a clock signal that may be used to clock in the 
policy search key and an instruction that causes the process of Figure 7 to be 
performed by DSP 602. DSP 602 may implement the classification function of 

25 Figure 7 in one or more clock cycles. 
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Inserting and Deleting Policy Statements 

As previously described, priority numbers for policy statements may be 
assigned in ascending or descending priority order such that there are gaps left 
between the numbers to accommodate the new priority numbers associated with 
5 new policy statements to be stored in CAM array 604. Alternatively, the priority 
numbers may be assigned in consecutive ascending or descending priority order. 
New policy statements and their associated priority numbers can be added to the 
tables 604 and 608 in conformance with either assignment method without 
having to reload or physically reorder the policy statements or the priority 

10 numbers in the respective tables. . 

Each new policy statement can be loaded into an y location (e.g., the next 
free location) in CAM array 604, and can be assigned ajie}^priority„numb^ 
without having to reload or reorder CAM arrayj504 and priority memory 608. 
When a new policy statement is received, jts_priqrit3^umher„can_he_compared^ 

15 with the existing priority numbers already stored in priority memory 608 to 
determine if a policy statement already exists thathas been assigned that 
priority. It is generally desirable thatno two ^policystatOTtents have the same 
priority number. Thus, if th^priority number already exists) the network 
administrator or the policy-based~router-itself canji^gnjh^ 

20 statement a new priority number, or the priority number of the existing policy^ 
statement can be updated (i.e., incremented or decremented). Since the existing 
priority numbers are stored in ascending or descending order, updating one 
priority number may also result in the need to update other priority numbers 
such that no two priority numbers are the same. 

25 For one embodiment, DSP 602 may include additional circuitry to 

determine if at least one of the existing priority numbers stored in memory 608 is 
greater than or equal to (e.g., for ascending priority order), or, alternatively, less 
than or equal to (e.g., for descending priority order), the new priority number. If 
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so, the existing priority numbers that are identified by the comparison may be 
updated such that a new policy statement does not have the same priority 
number as an existing policy statement. For other embodiments described 
below, priority logic 610 itself in priority index table 606 may perform the 
5 additional compare function(s) and control the updating function(s). 

Figure 17 shows one embodiment of priority index table 606 of Figure 6 
including inequality circuits INEQ 1704o-1704n-i that perform the additional 
comparison functions and control the updating functions. The inequality circuits 
determine if a new priority number PNEW 1710 of a new policy statement 1708 
10 is the same, higher, or, alternatively, lower than any of the priority numbers 



already stored in memory 608. The inequality circuits also update the priorities .jt^ 

IT 

of the existing policy statements in order to insert the new policy statement. The 
new policy statement and its associated priority number do not need to be 
physically inserted between the existing entries; rather, the v can be loaded into_ 
15 any desirable address (e.g., the next free address) in the CAM array and priority 
memory, andJh ^riorit Yjuimbers oHhe ^ex^^ng,policy .statements, updated 



accordingly. Similarly, when a policy statement is removed (i.e., invalidated or 
overwritten) from the CAM array, the inequ ality circuits_m ay updateJhe„priority 
numbers of the previo usly stored policy statements. These updating functions 

20 can be performed by the inequality circuits without the need to physically 
reorder the policy statements in the CAM array, or to physically reorder the 
priority numbers in the priority index table. This can reduce the hardware 
and/ or software needed for table management of the CAM array, and can 
increase the performance of a router incorporating the DSP. 

25 For an alternative embodiment, the inequality circuits do not update the 

existing, stored priority numbers during or after an insert or delete operation. 
For this embodiment, gaps may be left in the priority numbers after an insert or 
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delete function. These gaps may or may not be filled with subsequent priority 
numbers. 

As shown in Figure 17, each location 608o-608n-i in the priority memory 
has a corresponding inequality circuit 1704o-1704n-i that comparesjhenew 
priority number PNEW 1710 with the priorityjiumbe^ 

location. If PNEW is the same or a higher priority (e.g., is greater than or equal 
to, or, alternatively less than or equal to) t han an existin g priority jaumber, an 
inequality circuit jvvill update the existing priority numbej^Thej -tew p olicy 
statement 1708, PNEW, and the associated route information RInew, can then be 



10 written into CAM array 604, priority memory 608, and route memory 614, 

respectively, using conventional write circuits, counters, address decoders, etc. 
(not shown). 

Inequality circuits 1704o-1704n-i may be part of priority index table 606 as 
shown in Figure 17. Alternatively, inequality circuits 1704o-1704n-i may be 

15 separate from priority index table 606. The inequality circuits may be any 

inequality circuit that determines whether one number is greater than or equal 
to, greater than, less than or equal to, or less than another number. For an 
alternative embodiment, inequality circuits 1704o-1704n-i may be one circuit that 
consecutively, or in parallel, compares PNEW with each of the priority numbers 

20 Po-Pz. 

Figure 18 shows one example of adding new policy statement 1708 to 
CAM array 604 at the next free address of CAM array 604 (location 6043) and 
updating the existing priority numbers stored in memory 608. New policy 
statement 1708 is assigned priority number 1, and has route information RI3. 
25 CAM array 604 already includes policy statements 201, 202, and 203 sto red at 
locations 604o, 604i, and 6042, respectively. The corresponding priority numbers 
2, 1, and 0 are stored at locations 6O80, 6O81, and 6082, respectively, in priority 
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memory 608. Additionally, the corresponding route information Rio, RIi, and 
Rh, are stored at locations 614o, 614i, and 6142, respectively, of route memory 
614. For this embodiment, the policy statements are assigned priority numbers in 
ascending priority order such that policy statement 203 is identified as the 
highest priority policy statement by being assigned priority number 0; policy 
statement 201 is identified as the lowest priority policy statement by being 
assigned priority number 2; and, policy statement 202 is identified as having a 
priority greater than that of policy statement 201, but less than that of policy 
statement 203, by being assigned priority number 1. 

Inequality circuits 1704o-17042 compare PNEW with the exiting priority 
numbers as follows. The comparisons are made in parallel by each inequality 
circuit, however, they may also be made consecutively or in groups. Inequality 
circuit 17042 compares its corresponding priority number 0 with the new priority 
number 1 and determines that 0 is a higher priority than 1 (i.e., that 0 is 
numerically less than 1). The priorit y number ^for policy stat^^ 
updated. Inequality circuit 1704i compares its corresponding priority number 1 
with the new priority number 1 and determines that they have the same priority. 
The priority number Jiorjx)lic y statement 202 is incremen tedh(updated) by one to 
theriumb^ 1704o compares its corresponding priority 

number 2 with the new priority number 1 and determines that 1 is a higher 
priority than 2 (i.e., that 1 is numerically less than 2). The pri ority number for 
policy statement 201 is thenjncremented to 3. The modified table entries after 
the insertion of the new policy statement and its associated priority number are 
shown in Figure 19. 

Figure 20 shows another example of adding new policy statement 1708 to 
CAM array 604 at the next free address of CAM array 604 (location 6O43). For 
this embodiment, policy statements 201, 202, and 203 have priority numbers 14, 
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15, and 16, respectively, and the new policy statement has priority number 15. 
The policy statements are assigned in descending priority order such that policy 
statement 203 is identified as the highest priority policy statement by being 
assigned priority number 16; policy statement 201 is identified as the lowest 
5 priority policy statement by being assigned priority number 14; and, policy 
statement 202 is identified as having a priority greater than that of policy 
statement 201, but less than that of policy statement 203, by being assigned 
priority number 15. 

Inequality circuit 17042 compares its corresponding priority number 16 
10 with the new priority number 15 and determines that 16 is a higher priority than 
15 (i.e., that 16 is numerically greater than 15). The priority number for policy 
*S statement 203 is not updated. Inequality circuit 1704i compares its 

r— 

Q corresponding priority number 15 with the new priority number 15 and 

i.S I 

j*& determines that they have the same priority. The priority number for policy 

q 15 statement 202 is decremented (updated) by one to the number 14. Inequality 
q circuit 1704o compares its corresponding priority number 14 with the new 

jfj priority number 15 and determines that 15 is a higher priority than 14 (i.e., that 

^ 14 is numerically less than 15). The priority number for policy statement 201 is 

^ then decremented to 13. The modified table entries after the insertion of the new 

20 policy statement and its associated priority number is shown in Figure 21. 
As indicated above, the priority numbers can be incremented, 
decremented, or left unchanged after PNEW is compared with the priority 
number. Figure 22 shows priority memory 2208 that is one embodiment of 
priority memory 608. Priority memory 2208 includes counters 2208o-2208n-i. 
25 Each counter corresponds to priority memory location 608o-608n-i, respectively, 
and stores the priority number for that location. The counters can be loaded (i.e., 
written to) using write circuits, read from using read circuits, or reset as 
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generally known in the art. Additionally, each counter 2208o-2208n-i provides its 
stored priority number Po-Pz to a corresponding inequality circuit 1704o-1704n-i 
for comparison with PNEW. When PNEW has a higher priority than the stored 
priority number for a given location, then the inequality circuit will assert its 
5 count signal COUNTo-COUNTn-i such that the corresponding counter is 

incremented (or, alternatively, decremented). The counter will be incremented if 
the UP signal is asserted, or will be decremented if the DOWN signal is asserted. 
The UP and DOWN signals may be generated by an instruction decoder (not 
shown) on DSP 602 that receives and decodes an insert (write) instruction or a 
10 delete (invalidate) instruction to the DSP. For an alternative embodiment, the 
inequality circuits may each output UP and DOWN signals to their 
corresponding counters directly in response to one or more signals from the 
instruction decoder. The counters may be updated synchronously or 
asynchronously . 

15 Inequality circuits 1704o-1704n-i may be disposed external to priority 

memory 2208, or they may be integrated into the priority memory itself. Figure 
23 shows one embodiment of integrating an inequality circuit with a counter in 
the priority memory. For this embodiment, inequality circuit 2304o is one 
embodiment of inequality circuit 1704o, and may also be used for any of 

20 inequality circuits 1704i-1704n-i. Counter 2306o is one embodiment of counter 
2208o, and may also be used for any of counters 2208i-2208n-i. 

As shown in Figure 23, memory storage elements 231411-1,0-23140,0 have 
associated counter logic circuits 2316 n -i,o-2316o,oto form a conventional counter. 
Each memory storage element can be a volatile or non-volatile RAM or ROM 

25 storage element such as memory storage elements 1102 of Figure 11. The 
memory storage elements each store one bit of a priority number such that 
memory storage element 2314n-i,o stores the most significant priority number bit, 
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2314 n -2 / o stores the next most significant priority number bit, and 2314o,o stores the 
least significant priority number bit. Logic circuits 2316n-i,o-2316o,o receive the UP, 
DOWN, and COUNTo signals that indicate when the counter should increment, 
decrement, or leave unchanged the priority number stored in the counter. The 
counter can be configured to form any type of counter including the up/ down 
counter shown. Additionally, load and reset signals can be provided to the logic 
circuits to write or reset the counter. Bit lines, word lines, and read/write 
circuits generally known in the art may also be included to access the priority 
number bits stored in the memory storage elements. 

Inequality circuit 2304o includes compare circuits 2310 n -i,o-2310o,o. Each 
compare circuit can be any digital or analog compare circuits. Each compare 
circuit 2310n-i,o-2310o / o compares a priority number bit, stored in a corresponding 
memory storage element 2314x1-1,0-23140,0, with one of the corresponding bits 
PNEWn-i-PNEWo provided on signal lines 2308 n -i-2308o. Additionally, each 
compare circuit monitors the comparison result of the more significant priority 
number bits with PNEW via the logical states of control line segments 2312 n -2,o- 
2312o,o. The first control line segment 2312 n -i,omay be pre-charged by pre-charge 
circuit 2302 to indicate that it is the first control line segment. Alternatively, 
control line segment 2312 n -i,omay be initially discharged to indicate that it is the 
first control line segment. 

For this embodiment, the logical state of COUNTo on signal line 2318 
indicates the comparison result between PNEW and the priority number stored 
in counter 2306o. COUNTo is initially pre-charged by a pre-charge circuit 2302 to 
a high logic state. If COUNTo remains pre-charged after each compare circuit 
performs its comparison function, then the priority number in counter 2306o is 
updated. Alternatively, if COUNTo is discharged by one of the compare circuits, 
then the priority number in counter 2306o is updated. For other embodiments, 
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COUNTo may be initially discharged to a logic low state, and counter 2306 
updated if COUNTo remains discharged, or, alternatively, if COUNTo is charged 
to a logic one state by one of the compare circuits. For yet another embodiment, 
signal line 2318 may be segmented like control line segments 2312 between 
5 compare circuits, and the segmented signal line 2318 output from compare 
circuit 23100,0 provided to counter logic circuit 2316o,o as COUNTo. 

The operation of the embodiment of Figure 23 can be illustrated with the 
example shown in Figure 24. In this example, a 3x3 matrix of rows and columns 
stores three priority numbers. For other embodiments, any numbers of rows and 

10 columns can be used. Row 0 stores priority number 010 having the decimal 

equivalent of the number 2, row 1 stores priority number 001 having the decimal 
equivalent of the number 1, and row 2 stores priority number 000 having the 
decimal equivalent of the number 0. For this example, the priority numbers are 
assigned in ascending priority order such that 000 is the most significant priority 

15 number, 001 is the next most significant priority number, and 010 is the least 
significant priority number. 

When a new policy statement having PNEW 001 is to be loaded into CAM 
array 604, inequality circuits 23042-2304o compare PNEW with their 
corresponding priority numbers stored in counters 23062-2306o, respectively. 

20 Inequality circuit 23042 determines that 000 is a higher priority than PNEW; 
inequality circuit 2304i determines that 001 is equal to PNEW; and inequality 
circuit 2304o determines that 010 is a lower priority than PNEW. Inequality 
circuit 23042 leaves its priority number unchanged. Inequality circuits 2304i and 
2304o cause counters 2306i and 2306oto increment by one their existing priority 

25 numbers such that they do not have the same priority number as PNEW. The 
new policy statement and PNEW can then be loaded into CAM array 604 and 
priority memory 608, respectively. 
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Inequality circuits 2304i and 2304o cause their corresponding counters 
2306i and 2306oto be incremented as follows. The comparisons of the most 
significant bit PNEW2 with the most significant bits stored in counters 23062- 
2306o are resolved first. When an individual compare circuit determines that its 
corresponding memory storage element stores the same logic state as the PNEW 
bit, the compare circuit leaves the COUNT signal line unaffected, and drives the 
next control line segment to the same logical state of the previous control line 
segment. Since each of memory storage elements 23142,2, 23142,i, and 23142,0 store 
a logic zero and PNEW 2 is a logic zero, COUNT 2 , COUNTi, and COUNTo remain 
unaffected. Additionally, control signals on control line segments 23121,2, 2312i,i, 
and 2312i,oare asserted to high logic states. The inequality circuits cannot yet 
determine, based on the most significant bits alone, whether PNEW is greater 
than or equal to any of the stored priority numbers. 

The comparison of the next most significant bit PNEWi with priority 
number bits stored in memory elements 23141,0, 2314i,i and 2314i,2 is then 
resolved. Since memory elements 2314i,2and 2314i,i store the same logic states as 
PNEWi, COUNT2 and COUNTi remain unaffected, and control signals on 
control line segments 2312o,2and 2310o,i are asserted to high logic states. 
Compare circuit 2310i,o, however, determines that the priority number stored in 
counter 2306ois greater than PNEW because: (1) memory element 2314i,o stores a 
logic one; (2) the control signal is high on control line segment 2312i,o; and (3) 
PNEWi is a logic zero on signal line 2308i. When compare circuit 2310i,o makes 
this determination, it leaves COUNTo unaffected so that it will remain pre- 
charged to update the priority number stored in counter 2306o. Additionally, 
compare circuit 2310i,o asserts the control signal on control line segment 2312o,o to 
a low logic state. When the control signal on control line segment 2310o,o is low, 
the control signals on all subsequent control line segments are also asserted to 
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low logic states. When the control signals are low, all lower priority compare 
circuits are rendered incapable of discharging COUNTo regardless of what is 
stored in their corresponding memory elements, and regardless of the logical 
states of the subsequent PNEW bits. For example, 231 Oo,o will be rendered 
incapable of discharging COUNTo even though PNEWo, a logic one, is greater 
than the logic zero stored in memory element 23140,0. 

Lastly, the comparison of the least significant bit PNEWo with priority 
number bits stored in memory elements 23140,0, 2314o,i and 2314o,2is resolved. As 
indicated above, inequality circuit 2304ohas already determined that 010 is 
greater than 001 and thus COUNTo remains pre-charged to update the priority 
number stored in counter 2306o. Since the control signal on control line segment 
2312o,i is high, compare circuit 23100,1 compares the logic one stored in memory 
element 2314o,i with the logic one of PNEWo and determines that PNEW is the 
same number as that stored in counter 2306i. In response, COUNTi remains in a 
pre-charged state to update the priority number stored in counter 2306i. 
Compare circuit 2310o,2, however, determines that PNEWo is greater than the 
logic zero stored in memory element 2314o,2. Since the control signal is high on 
control line segment 2312o,2, compare circuit 23100,2 discharges COUNT2 such 
that the priority number 000 stored in counter 23062 will not be updated. After a 
sufficient amount of time has passed such that all of the bit comparisons have 
had time to resolve, the UP signal can be asserted such that the priority numbers 
in counters 2306i and 2306o are incremented. For one embodiment, the COUNT 
signals can be latched prior to providing the UP signal. 

Any compare circuits may be used for compare circuits 2310 to implement 
the process illustrated above. Table 3 shows one example of a truth table for 
implementing each compare circuit 2310, where X (column) and Y (row) are any 
integers. Other truth tables may be used (and corresponding logic generated 
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accordingly) including those that logically complement one or more of the 
signals indicated in Table 3. 
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Table 3 



Any logic or circuitry may be used to implement the truth table of Table 3. 
Figure 25 A shows compare circuit 2502 that is one embodiment of compare 
circuit 2310 n -i / o for implementing the truth table of Table 3. The embodiment of 
Figure 25A may be used to implement all of the compare circuits 2310. 

Compare circuit 2502 includes inverter 2510, NAND gate 2508, AND gate 
2506, and n-channel transistors 2504, 2503, and 2507. NAND gate 2508 has one 
input coupled to signal line 2308 n -i via inverter 2510, and another input coupled 
to receive the data (D) stored in memory element 2314n-i,o. AND gate 2506 has 
one input coupled to the output of NAND gate 2508, another input coupled to 
control line segment 231211-1,0, and an output coupled to control line segment 
2312 n -2,o. Transistor 2504 has its drain coupled to the signal line 2318, its gate 
coupled to the output of AND gate 2506, and its source coupled to the drain of 
transistor 2503. Transistor 2503 also has its gate controlled by signal line 2308 n -i, 
and its source coupled to the drain of transistor 2507. Transistor 2507 also has its 
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gate coupled to receive /D from memory 2314n-i,o, and its source coupled to 
ground. 

Figure 25B shows compare circuit 2522 that is another embodiment of 
compare circuit 2310 n -i,ofor implementing the truth table of Table 3. In this 
5 embodiment, signal line 2318 is segmented into separate control line segments. 
The embodiment of Figure 25B may be used to implement all of the compare 
circuits 2310. 

Compare circuit 2522 includes inverter 2512, NAND gates 2514 and 2516, 
and AND gates 2518 and 2520. NAND gate 2514 has one input coupled to signal 
10 line 2308 n -i via inverter 2512, and another input coupled to D of memory 231411-1,0. 
4aa AND gate 2520 has one input coupled to control line segment 23120-1,0, another 

=-S input coupled to the output of NAND gate 2514, and an output coupled to 

Q control line segment 2312 n -2,o. NAND gate 2516 has a first input coupled to 

M control line segment 2312 n -i,o, a second input coupled to /D of memory 231411-1,0, 

□ 15 and a third input coupled to signal line 2308 n -i. AND gate 2518 has a first input 

□ coupled to count line segment 2318 n -i,o, a second input coupled to the output of 
fj NAND gate 2516, and an output coupled to count line segment 2318 n -2,o. 

% For the example described above with respect to Figure 24, the most 

significant number is the lowest number such that 000 is the most significant 

20 number between 000, 001, and 010. For another embodiment, the priority 

numbers are assigned in descending priority order such that the most significant 
priority number is the priority number with the highest numerical value, and the 
least significant priority number is the priority number with the lowest 
numerical value. Figure 26 shows such an example in which the 3x3 matrix of 

25 Figure 24 includes the binary priority number 111 (decimal equivalent of 7) 

stored in counter 23062, priority number 110 (decimal equivalent of 6) stored in 
counter 2306i, and priority number 101 (decimal equivalent of 5) stored in 
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counter 2306o. Numbers 7, 6, and 5 are stored in rows 2, 1, and 0, respectively. In 
this example, 111 is the most significant priority number, 110 is the next most 
significant priority number, and 101 is the least significant priority number. 

When a new policy statement having PNEW 110 is to be loaded into CAM 
5 array 604, the logical complement of PNEW (i.e., 001) is provided to signal lines 
2308 2 -2308o. Inequality circuits 2304 2 -2304 0 compare PNEW with their 
corresponding priority numbers stored in counters 23062-2306o, respectively. 
Inequality circuit 23042 determines that 111 is a higher priority than PNEW; 
inequality circuit 2304i determines that 110 is equal to PNEW; and inequality 
10 circuit 2304o determines that 101 is a lower priority than PNEW. Inequality 

circuit 23042 leaves its priority number unchanged. Inequality circuits 2304o,i and 
2304o,o each cause their corresponding counters 2306i and 2306o to decrement by 
P one their existing priority numbers such that they do not have the same priority 

\*& number as PNEW. The new policy statement and PNEW can then be loaded into 

q 15 CAM array 604 and priority memory 604, respectively. 
n Inequality circuits 2304i and 2304o cause their corresponding counters 

[JJ 2306i and 2306o to be decremented as follows. The comparisons of the most 

;i; significant bit PNEW2 with the most significant bits stored in counters 23062- 

- u 2306o are resolved first. When an individual compare circuit determines that its 

20 corresponding memory storage element stores the same logic state as the PNEW 
bit, the compare circuit leaves the COUNT signal line unaffected, and drives the 
next control line segment to the same logical state of the previous control line 
segment. Since each of memory storage elements 23142,2, 2314 2/ i, and 23142,o store 
a logic one and PNEW2 is a logic one, COUNT 2 , COUNTi, and COUNTo remain 
25 unaffected. Additionally, control signals on control line segments 23121,2, 2312x4, 
and 23121,0 are asserted to high logic states. The inequality circuits cannot yet 
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determine, based on the most significant bits alone, whether PNEW is less than 
or equal to any of the stored priority numbers. 

The comparison of the next most significant bit PNEWi with priority 
number bits stored in memory elements 23141,0, 23141,1 and 2314i,2 is then 
5 resolved. Since memory elements 2314i,2and 2314i,i store the same logic states as 
PNEWi, COUNT2 and COUNTi remain unaffected, and control signals on 
control line segments 23120,2 and 2310o,i are asserted to high logic states. 
Compare circuit 23101,0, however, determines that the priority number stored in 
counter 2306o is less than PNEW because: (1) memory element 2314i,o stores a 
10 logic zero; (2) the control signal is high on control line segment 2312i,o; and (3) 
PNEWi is a logic one. When compare circuit 2310i,o makes this determination, it 

las? 

;0 leaves COUNTo unaffected so that it will remain pre-charged to update the 

□ priority number stored in counter 2306o. Additionally, compare circuit 2310i,o 

irf, asserts the control signal on control line segment 2312o,o to a low logic state, 

p 15 When the control signal on control line segment 23100,0 is low, the control signals 
13 on all subsequent control line segments are also asserted to low logic states, 

jtl When the control signals are low, all lower priority compare circuits are 

•\? rendered incapable of discharging COUNTo regardless of what is stored in their 

^ corresponding memory elements, and regardless of the logical states of the 

20 subsequent PNEW bits. For example, 23100,0 will be rendered incapable of 

discharging COUNTo even though PNEWo, a logic zero, is less than the logic one 

stored in memory element 2314o,o. 

Lastly, the comparison of the least significant bit PNEWo with priority 

number bits stored in memory elements 2314o,2, 2314o,i and 2314o,o is resolved. As 
25 indicated above, inequality circuit 2304o has already determined that 101 is less 

than 110 and thus COUNTo remains pre-charged to update the priority number 

stored in counter 2306o. Since the control signal on control line segment 2312o,i, is 
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high, compare circuit 23100,1 compares the logic zero stored in memory element 
23140,1 with the logic one on line 2308o and determines that PNEW is the same 
number as that stored in counter 2306i. In response, COUNTi remains in a pre- 
charged state to update the priority number stored in counter 2306i. Compare 
5 circuit 23100,2, however, determines that PNEWo is less than the logical one 

stored in memory element 2314o,2. Since the control signal is high on control line 
segment 23120,2, compare circuit 2310o,2 discharges COUNT2 such that the 
priority number 111 stored in counter 23062 will not be updated. After a 
sufficient amount of time has passed such that all of the bit comparisons have 

10 had time to resolve, the DOWN signal can be asserted such that the priority 

numbers in counters 2306i and 2306o are decremented. For one embodiment, the 
COUNT signals can be latched prior to providing the DOWN signal. 

Any compare circuits may be used for compare circuits 2310 to implement 
the process illustrated above. Table 4 shows one example of a truth table for 

15 implementing each compare circuit 2310, where X (column) and Y (row) are any 
integers. Other truth tables may be used (and corresponding logic generated 
accordingly) including those that logically complement one or more of the 
signals indicated in Table 4. 



20 



25 
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Table 4 



Any logic or circuitry may be used to implement the truth table of Table 4. 
Figure 27 A shows compare circuit 2702 that is one embodiment of compare 
circuit 2310 n -i/0 for implementing the truth table of Table 4. The embodiment of 
Figure 27A may be used to implement all of the compare circuits 2310. 

Compare circuit 2702 includes inverter 2510, NAND gate 2508, AND gate 
2506, and n-channel transistors 2504, 2503, and 2507 as in Figure 25A. NAND 
gate 2508 has one input coupled to signal line 2308 n -i, and another input coupled 
to receive the /D stored in memory element 2314n-i,o. AND gate has one input 
coupled to the output of NAND gate 2508, another input coupled to control line 
segment 2312 n -i,o, and an output coupled to control line segment 2312 n -2,o. 
Transistor 2504 has its drain coupled to the signal line 2318, its gate coupled to 
the output of AND gate 2506, and its source coupled to the drain of transistor 
2503. Transistor 2503 also has its gate controlled by signal line 2308 n -i via 
inverter 2510, and its source coupled to the drain of transistor 2507. Transistor 
2507 also has its gate coupled to receive D from memory 2314n-i,o, and its source 
coupled to ground. 
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Figure 27B shows compare circuit 2704 that is another embodiment of 
compare circuit 23100-1,0 for implementing the truth table of Table 4. In this 
embodiment, signal line 2318 is segmented into separate control line segments. 
The embodiment of Figure 27B may be used to implement all of the compare 
5 circuits 2310. 

Compare circuit 2704 includes inverter 2708, NAND gate 2710, and AND 
gates 2706 and 2712. NAND gate 2710 has a first input coupled to signal line 
2308 n -i, a second input coupled to D of memory 2314n-i,o, and a third input 
coupled to control line segment 2312 n -i,o via inverter 2708. AND gate 2706 has . 
10 one input coupled to count line segment 2318 n -i,o, another input coupled to the 
output of NAND gate 2710, and an output coupled to count line segment 2318 n - 
•S 2,o. AND gate 2712 has a first input coupled to control line segment 2312 n -i,o, a 

□ second input coupled to /D of memory 2314n-i,o, a third input coupled to signal 

;'---e 

M line 2308 n -i, and an output coupled to control line segment 2312 n -2,o. 

p 15 The embodiments of Figures 17-27 show that a new policy statement 

q having a priority greater than or equal to an existing policy statement, can be 

j^j added to the DSP without having to physically reorder or reload the CAM array 

; ~ storing the policy statements, or the memory storing the priority numbers. 

^ Instead, inequality circuits update the appropriate existing priority numbers. 

20 Since the updating function can be performed without the need to physically 
reorder or reload the policy statements in the CAM array, or to physically 
reorder or reload the priority numbers in the priority index table, this can reduce 
the hardware and/ or software needed for table management of the CAM array, 
and can increase the performance of a router incorporating the DSP. 
25 Policy statements may also be deleted from CAM array 604 using priority 

index table 606 of Figure 17. When a policy statement is deleted, the 
corresponding priority number in priority memory 608 is also deleted. The 
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policy statements and priority numbers can be deleted by setting one or more 
valid bits to an appropriate state for the row of CAM array 604 that stores the 
policy statement to be deleted. The valid bit(s) may be stored in CAM array 604, 



When a priority number is deleted, the remaining priority numbers in 
priority memory 608 can be left unchanged. This may leave gaps in the priority 
numbers stored in the priority memory. These gaps may be filled in by new 
priority numbers associated with new policy statements to be added to the DSP, 
or they may remain as unused gaps. For another embodiment, remaining 
priority numbers in the priority memory can be updated by the inequality and 
counter circuits. If the priority numbers are assigned in ascending priority order, 
and one of the priority numbers is deleted or invalidated, then any other priority 
numbers that are greater than the deleted number can be decremented by the 
inequality circuits. For example, if priority memory 608 stores priority numbers 
0, 1, and 2, and priority number 1 is invalidated, then priority number 2 can be 
decremented to 1. Similarly, if the priority numbers are assigned in descending 
priority order, and one of the priority numbers is deleted or invalidated, then 
any other priority numbers that are less than the deleted number can be 
incremented by the inequality and counter circuits. For example, if priority 
memory 608 stores priority numbers 0, 1, and 2, and priority number 1 is 
invalidated, then priority number 0 can be incremented to 1. Updating the 
priority numbers can help to avoid unused gaps in priority memory 608. 

Figure 28 shows one embodiment of a process 2800 for deleting or 
invalidating policy statements and their associated priority numbers. At step 
2802, the priority number to be deleted is compared with the entries in the 
priority memory. For this embodiment, priority memory 608 is a CAM, or has 
one or more compare circuits external to the memory to perform the comparison. 




608, or in each of the memory arrays. 
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For an alternative embodiment, step 2802 may compare the policy statement 
with the existing entries in CAM array 604. For this embodiment, priority 
memory 608 may not be a CAM. 

If there is no match at step 2802, the process stops at step 2804. The 
5 process could also stop if there was more than one match, and an error flag such 
as a multiple match flag may be asserted. Alternatively, the process may 
continue to delete all identified matches. If there is a match, both the policy 
statement and the priority number are invalidated or deleted at step 2806. As 
described above, this may be accomplished by setting a valid bit(s) to an 
10 appropriate state for that row in priority memory 608. If the valid bit(s) is 
located in CAM array 604, and is inaccessible by priority memory 608, then 
priority logic 610 can then identify the location of the matching entry (as 
described above), and provide the indication to IADo-IADn i. These signal lines 
can then be provided through encoder 612 back to CAM array 604 (e.g., through 
15 a decoder) to address the appropriate location and invalidate the policy 

statement. Alternatively, the signal lines I ADo- 1 ADn-i can be provided directly 

^ to CAM array 604 to access the appropriate location for invalidation. 

\ y 

^ The process may stop after step 2806 and potentially leave gaps in the 

S priority numbers. Alternatively, the process may proceed to step 2808 to update 

20 the remaining entries in the priority memory. When the process continues, the 
deleted priority number is provided to the inequality circuits 1704o- 1704n-i, at 
step 2808, to determine which entries in the priority memory have a lower 
priority than the deleted priority number. The inequality and counter circuits 
may then update the identified numbers, at step 2810, as previously described. 
25 The delete functions illustrate one example of the DSP 602 utilizing both 

the inequality circuits and the priority logic to operate on the priority numbers 
stored in priority memory 608. Figure 29 shows one example of combining an 



S 
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inequality circuit with a priority logic circuit into a single array such that each 
circuit operates on the priority numbers on a bit-by-bit basis. The embodiment of 
Figure 29 combines row 1201o of priority logic elements from Figure 12A with 
inequality circuit 2304o and counter 2306o of Figure 23 to form row zero in 
5 priority index table 606 of Figure 17. For an alternative embodiment, row 1201o 
from Figure 12B may also be used. The priority logic elements and inequality 
circuits share memory elements 2314o,o-2314n-i,o. Memory elements 2314o,o-2314n- 
1,0 also correspond to memory elements 11020,0-110211-1,0. Conventional bit lines, 
word lines, read and write circuits, and optional comparand data lines and 
10 match lines (i.e., when memory elements 2314o,o-2314n-i,o are CAM cells) are not 
shown so as not to obscure the teachings of the figure, 
ifi Figure 30 shows another embodiment of combining the row 1201o of 

;.-p 

□ priority logic elements from Figure 12A with the inequality circuit 2304o of 

Figure 23 to form row zero in priority index table 1706 of Figure 17. In this 

'si 

£ 15 embodiment, signal lines 1208 n -i-1208o and 2308 n -i-2308o are replaced with a 
j«5 single set of signal lines 2906 n -i-2906o that can be used to determine the most 

j|: significant priority number PNUM, or used to carry PNEW. Also, for this 

embodiment, match line segments 1210 n -i,o-1210o,o serve a dual function to 
^ operate as match line segments when determining the most significant priority 

20 number, and as control line segments (i.e., 2312 n -i,o-2312o,o of Figure 23) to 

generate COUNTo when determining when a new priority number has a priority 
that is greater than or equal to the priority number stored in counter 2306. Thus, 
compare circuit 2310 n -i,ois coupled to match line segment 1210 n -2,o, compare 
circuit 2310 n -2,ois coupled to match line segment 1210 n -3,o, and so forth, and 
25 COUNTo is provided on signal line IADo. For an alternative embodiment, 
compare circuits 2310 may provide control signals to isolation circuits 1204 
instead of directly controlling the match line segments. 
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A control signal BCT indicates whether the priority index table uses the 
row of priority logic elements 1201o to determine the most significant priority 
number in priority memory 608, or whether the priority index table uses the 
inequality circuit 2304o to determine if a new priority number has a priority that 
5 is greater than or equal to the priority number stored in counter 2306. BCT may 
be provided by an instruction decoder in DSP 602 that interprets and decodes 
instructions provided to the DSP. When BCT is a low logic state, the priority 
logic elements perform their priority function; and when BCT is a high logic 
state, the inequality circuits perform their inequality function. Thus, when BCT is 
10 low, compare circuit 1206 n -i,o is enabled, compare circuit 2310 n -i,o is disabled, and 
logic 2902 provides the state of MLo to match line segment 1210 n -i,o. When BCT is 

P 

> : o high, compare circuit 1206 n -i,o is disabled, compare circuit 231011-1,0 is enabled, and 

i£ast 

D logic 2902 drives match line segment 1210 n -i,o to a high logic state such that match 

I** line segments 121011-1,0-12100,0 function as control line segments 2312x1-1,0-23120,0 of 

^ 15 Figure 23. Logic 2902 may be any logic that performs this function. 
|L=, For another embodiment of Figure 30, row 1201o of priority logic elements 

:j| from Figure 12B may be combined with the inequality circuit 2304o of Figure 23 

^ to form row zero in priority index table 1706 of Figure 17. 

'•S The logic and circuitry for implementing the priority logic elements and 

20 the inequality circuits illustrated in Figures 29 and 30 may be those that 

implement the truth tables shown in Tables 1, 2, 3, and 4 above. For example, the 
logic and circuits illustrated in Figures 14, 15, 25 A, 25B, 27 A, and 27B may be 
used. 

For one embodiment, the priority numbers are assigned in ascending 
25 priority order in priority memory 608. For this embodiment, logic and circuitry 
that implements the truth table shown in Table 1 (e.g., the logic and circuitry of 
Figures 14 or 15) may be used for the priority logic elements to determine the 
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lowest priority number as the most significant priority number. Also for this 
embodiment, the logic and circuitry shown in the truth table shown in Table 3 
(e.g., the logic and circuitry of Figures 25A or 25B) may be used for the inequality 
circuits to determine if a new priority number has a priority that is greater than 
5 or equal to the priority number stored in counter 2306. 

Figure 31 shows one example of combining the logic and circuitry of 
Figures 14 and 25 to implement the embodiment of Figure 30 when the priority 
numbers are assigned in ascending priority order in priority memory 608. For 
this example, OR gate 3102 is one embodiment of logic 2902. OR gate 3102 has 
10 one input coupled to MLo, and another input coupled to BCT. BCT is also 

coupled to the gate of n-channel transistor 3106 and one input of OR gate 3104 

D 

\Q via inverter 3108. Transistor 3106 has its drain coupled to signal line 2906 n -i, and 

□ its source coupled to the drain of transistor 1406. OR gate 3104 has another input 

y- coupled to the output of AND gate 2506, and has its output coupled to the gate 

15 of transistor 2504. Transistor 2504 is coupled between line segment 1210 n -2,o and 
U node 3112. Transistor pairs 1410/1412 and 2503/2507 are each coupled in series 

;?f between node 3112 and ground. 

^ For another embodiment, the priority numbers are assigned in descending 

! J3 priority order in priority memory 608. For this embodiment, logic and circuitry 

20 that implements the truth table shown in Table 2 (e.g., the logic and circuitry of 
Figures 14 or 15 modified as indicated above) may be used for the priority logic 
elements to determine the lowest priority number as the most significant priority 
number. Also for this embodiment, the logic and circuitry shown in the truth 
table shown in Table 4 (e.g., the logic and circuitry of Figures 27A or 27B) may be 
25 used for the inequality circuits to determine if a new priority number has a 

priority that is less than or equal to the priority number stored in counter 2306. 
Figure 32 shows one example of combining the logic and circuitry of Figures 14 
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and 27 to implement the embodiment of Figure 30 when the priority numbers are 
assigned in descending priority order in priority memory 608. 

The embodiments of Figures 17-32 include additional inequality circuits to 
compare PNEW with the priority numbers already stored in the priority index 
5 table. For another embodiment, priority logic 610 itself can be used to determine 
whether to update existing priority numbers stored in the priority index table in 
response to an insert or delete instruction. As with the previously described 
embodiments above, the new policy statement and PNEW do not need to be 
physically inserted between the existing entries; rather, they can be loaded into 

10 any desirable address (e.g., the next free address) in the CAM array and priority 
memory, and the priority numbers of the existing policy statements updated 
accordingly. Similarly, when a policy statement is removed (i.e., invalidated or 
overwritten) from the CAM array, the priority logic may update the priority 
numbers of the previously stored policy statements. These updating functions 

15 can be performed by the priority logic without the need to physically reorder the 
policy statements in the CAM array, or to physically reorder the priority 
numbers in the priority index table. This can reduce the hardware and/ or 
software needed for table management of the CAM array, and can increase the 
performance of a router incorporating the DSP. 

20 When the priority numbers are assigned in ascending priority order and 

PNEW is to be added to any free location in memory 608, priority logic 610 can 
determine whether the priority numbers already stored in memory 608 should 
be incremented as follows. PNEW is decremented by one (or another value) and 
then compared with the existing priority numbers stored in memory 608 by 

25 priority logic 610. For this embodiment, the priority numbers in memory 608 are 
not compared with each other, but with the decremented PNEW. Since priority 
logic 610 determines which compared number is the lowest numerical value, it 
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can also determine the logical converse; that is, it can determine which of the 
stored priority numbers are greater than the decremented PNEW. Each priority 
number that is greater than the decremented PNEW is then incremented by the 
priority logic. PNEW is then added to memory 608. 

Figure 33 shows one example of inserting policy statement 1708 and 
PNEW into memory 608 having priority numbers 0, 1, and 2 assigned in 
ascending priority order. This is the same example shown in Figures 18 and 19, 
except that priority logic 610 is used to control updating of the priority numbers 
stored in memory 608. PNEW, having a value of 1, is decremented by 1 by 
decrement circuit 3304 to form PSUB having a value of zero. PSUB is then 
provided to priority table 606 via multiplexer 3302. Decrement circuit 3304 may 
be any subtraction circuit that decrements PNEW by one or another value. 
Multiplexer 3302 provides PSUB to priority index table 606 in response to control 
signal INST, which indicates that an insert function is to take place. INST may be 
generated by an instruction decoder (not shown) that receives an insert (write) 
instruction. 

PSUB is compared with the stored priority numbers by priority logic 610. 
In response to control signal BCT, logic 3306 asserts all match lines MLo-MLn-i to 
a particular logic state to indicate that all stored policy statements match policy 
statement 1708 (even though no actual comparison takes place) such that the 
priority logic will compare all of the priority numbers in memory 608 with PSUB. 
Logic 3306 may be any logic circuit including, for example, AND, OR, XOR, or 
inverter circuits. BCT is a control signal that indicates an insert or delete function 
is being performed by DSP 602. BCT may be generated by an instruction 
decoder (not shown). BCT may also be provided to priority logic 610 to indicate 
that priority logic 610 should compare PSUB with each entry in memory 608 
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rather than comparing each entry in memory 608 with each other as in the 
classification function of Figure 7. 

Priority logic 610 determines that stored priority number 0 is equal to 
PSUB, and leaves this stored number unchanged. Priority logic 610 also 
determines that stored priority numbers 1 and 2 are larger than PSUB, and 
increments these numbers to 2 and 3, respectively. Policy statement 1708 and 
PNEW are then loaded into a free address in array 604 and memory 608, 
respectively. The modified table entries after the insertion are shown in Figure 
34. 

Note that if the priority number 0 is to be inserted, then decrement circuit 
3304 would generate a negative number. For one embodiment, only priority 
numbers greater than 0 may be used. For another embodiment, offset circuitry 
may be included in DSP 602 to add an offset value to PNEW before it is provided 
to decrement circuit 3304 and/ or multiplexer 3302. The offset circuitry may also 
be used to subtract the offset value when reading priority numbers from memory 
608 such that the offset function is transparent to the user of DSP 602. For yet 
another embodiment, DSP 602 can detect that PNEW is equal to zero when an 
insert instruction is received by DSP 602, or when an underflow condition occurs 
in decrement circuit 3304. PNEW can then be incremented by one and be 
provided to decrement circuit 3304, or PNEW can be provided directly to 
priority index table 606 by multiplexer 3302. After all the priority numbers 
greater than zero are detected and updated by priority logic 610, then memory 
608 can be searched for any existing entry that already has priority number 0. If 
so, this number can be incremented (i.e., by using the COUNT and UP signals, or 
by overwriting priority number 0 with priority number 1), and then PNEW 
added to memory 608. 
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A policy statement and its priority number may also be deleted or 
removed using priority logic 610. For example, policy statement 1708 may be 
removed from array 604, and its priority number 1 may be removed from 
memory 608 as follows. In response to a delete instruction, the priority number 
5 (3308) to be deleted is provided to policy index table 606 via multiplexer 3302 
(INST logic low), and is compared with the entries in the priority memory. For 
this embodiment, priority memory 608 is a CAM, or has one or more compare 
circuits external to the memory to perform the comparison. For an alternative 
embodiment, the policy statement associated with priority number 3308 may be 
10 compared with the existing entries in CAM array 604. Since location 6O83 

matches priority number 3308, both the policy statement and the priority number 
iji are invalidated or deleted. As described above, this may be accomplished by 

q setting a valid bit(s) to an appropriate state for that row in priority memory 608. 

If the valid bit(s) is located in CAM array 604, and is inaccessible by priority 
15 memory 608, then priority logic 610 can then identify the location of the 

matching entry (as described above), and provide the indication to IADo-IADn-i. 

;;H These signal lines can then be provided through encoder 612 back to CAM array 

1 y 

^ 604 (e.g., through a decoder) to address the appropriate location and invalidate 

S the policy statement. Alternatively, the signal lines I ADo- IADn-i can be 

20 provided directly to CAM array 604 to access the appropriate location for 

invalidation. The delete process may stop at this point and potentially leave gaps 
in the priority numbers. Alternatively, the process may update the remaining 
entries in the priority memory. When the process continues, the deleted priority 
number 3308 is provided to policy index table 606 via multiplexer 3302, to 
25 determine which entries in the priority memory have a lower priority than the 
deleted priority number. Priority logic 610 identifies priority numbers 2 and 3 as 
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having lower priorities (i.e., larger numerical values), and these numbers are 
decremented. The resultant table entries are as shown in Figure 33. 

The comparison and updating functions described with respect to Figures 
33 and 34 may also be performed by priority logic 610 on priority numbers 
5 assigned in descending priority order. For this embodiment, decrement circuit 
3304 may be replaced with an increment circuit that increments PNEW prior to 
supplying it to priority index table 606 for comparison as part of an insert 
function. 



10 in a row of memory 608) is to be inserted, then the increment circuit would 
generate a number larger than can be handled by priority index table 606. For 
one embodiment, only priority numbers less than 2™-! may be used. For another 
embodiment, offset circuitry may be included in DSP 602 to subtract an offset 
value to PNEW before it is provided to the increment circuit and/ or multiplexer 

15 3302. The offset circuitry may also be used to add the offset value when reading 
priority numbers from memory 608 such that the offset function is transparent to 
the user of DSP 602. For yet another embodiment, DSP 602 can detect that 
PNEW is equal to 2 n -l when an insert instruction is received by DSP 602, or 
when an overflow condition occurs in the increment circuit. PNEW can then be 

20 decremented by one and be provided to the increment circuit, or PNEW can be 
provided directly to priority index table 606 by multiplexer 3302. After all the 
priority numbers greater than 2 n -l are detected and updated by priority logic 
610, then memory 608 can be searched for any existing entry that already has 
priority number 2 n -l. If so, this number can be decremented (i.e., by using the 

25 COUNT and DOWN signals, or by overwriting priority number 2 n -l with 
priority number 2 n -2), and then PNEW added to memory 608. 



Note that if the largest priority number 2 n -l (where n is the number of bits 
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The embodiments described above in Figures 33 and 34 include the ability 
of priority logic 610 to increment and/ or decrement the priority numbers stored 
in priority memory 608. Priority memory 608 may be formed as counters that 
store the priority numbers. Figure 35 shows one embodiment of a row of 
5 priority memory 608 in which the priority logic 610 includes a separate priority 
logic element for each bit of a priority number. For this embodiment, the priority 
logic includes row 1201o of priority logic elements from Figure 12A, coupled to 
receive priority number bits stored in counter 2306o from Figure 23. PSUB bits 
PSUBn-i-PSUBo are provided on signal lines 1208 n -i-1208o, respectively, for 

10 comparison by compare circuits 1206 n -i,o-1206o,o with the priority bits stored in 
memory elements 231411-1,0-23140,0. When BCT is asserted to a high logic state, 
logic 3306o drives match line segment 1210 n -i,o to a high logic state, and PSUB is 
provided on signal lines 1208. BCT is also provided to each of compare circuits 
1206 such that the circuits do not provide their compare results back to signal 

15 lines 1208. Thus, only PSUB will be supplied on signal lines 1208. For an 
alternative embodiment, a separate set of signal lines may be used for the 
updating functions and the classification function. When BCT is asserted to a 
low logic state, MLo is provided to match lines segment 1210 n -i,o and the 
classification function of Figure 7 may be performed. 

20 For this embodiment, the logical state of IADo indicates the comparison 

result between PSUB and the priority number stored in counter 2306o. If IADo 
indicates that PSUB has a more significant priority than the priority number 
stored in counter 2306o/ then counter 2306o is incremented. If, however, IADo 
indicates that PSUB is equal to or has a less significant priority number than the 

25 priority number in counter 2306o, then counter 2306o is not incremented. 

The operation of the embodiment of Figure 35 to update priority numbers 
in response to an insert instruction can be illustrated with the example shown in 
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Figure 36. In this example, a 3x3 matrix of rows and columns stores three 
priority numbers. For other embodiments, any numbers of rows and columns 
can be used. Row 0 stores priority number 010 having the decimal equivalent of 
the number 2, row 1 stores priority number 001 having the decimal equivalent of 
5 the number 1, and row 2 stores priority number 000 having the decimal 

equivalent of the number 0. For this example, the priority numbers are assigned 
in ascending priority order such that 000 is the most significant priority number, 
001 is the next most significant priority number, and 010 is the least significant 
priority number. 

10 When a new policy statement having new a priority number PNEW 001 is 

to be loaded into CAM array 604, BCT is asserted to a high logic state, the control 
\Q signals on match line segments 12102,2, 121024, and 12102,0 are asserted to a high 

q logic state, and priority logic elements 120l2-1201o compare PSUB 000 (PNEW 

u decremented by 1) with their corresponding priority numbers stored in counters 

p 15 23062-2306o, respectively. Priority logic 12012 determines that 000 is equal to 



PSUB; priority logic 1201i determines that 001 is greater than PSUB; and priority 
logic 1201o determines that 010 is greater than PSUB. Priority logic 12012 leaves 
unchanged the priority number stored in counter 23062. Circuits 1201i and 1201o 
cause counters 2306i and 2306o to increment by one their existing priority 



20 numbers. The new policy statement and PNEW can then be loaded into CAM 
array 604 and priority memory 608, respectively. 

The comparisons of the most significant bit PSUB2 with the most 
significant bits stored in counters 23062~2306o are resolved first. When an 
individual compare circuit determines that its corresponding memory storage 

25 element stores the same logic state as the PSUB bit, the compare circuit leaves the 
control signal of the next match line segment unaffected such that it has the same 
logical state of the previous match line segment. Since each of memory storage 
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elements 23142,2, 231424, and 23142,0 store a logic zero and PSUB2 is a logic zero, 
the control signals on match line segments 1210i,2, 1210i,i, and 12101,0 remain 
asserted to a high logic state. 

The comparison of the next most significant bit PSUBi with priority 
5 number bits stored in memory elements 2314i,o, 2314i,i and 2314i,2 is then 

resolved. Since memory elements 2314i,2 and 2314i,i store the same logic states as 
PSUBi, the control signals on match line segments 1210o,2and 1210o,i remain in a 
high logic state. Compare circuit 12061,0, however, determines that the priority 
number stored in counter 2306o is greater than PSUB because: (1) memory 
10 element 23141,0 stores a logic one; (2) match line segment 1210i,o is a high logic 
state; and (3) PSUBi is a logic zero on signal line 1208i. When compare circuit 
iJ3 1206i,o makes this determination, it discharges match line segment 1210o,o to a 

□ low logic state. When a match line segment is discharged, all subsequent match 

i.^V line segments in that row are discharged to a low logic state such that IAD for 

s «j 15 that row is discharged to a low logic state. For this embodiment, when IAD is a 
L low logic state, the counter associated with that row will be incremented when 

!tj UP is asserted. Thus, IADo will cause counter 2306o to be incremented when UP 

W is asserted. 

jfi Lastly, the comparison of the least significant bit PSUBo with priority 

20 number bits stored in memory elements 2314o,o, 2314o,i and 2314o,2 is resolved. As 
indicated above, priority logic 1201ohas already determined that 010 is greater 
than 000 and thus IADo remains asserted to a low logic state. Since the control 
signal on match line segment 1210o,2 is in a high logic state, compare circuit 
1206o,2 compares the logic zero stored in memory element 2314o,2 with the logic 
25 zero of PSUBo, and determines that PSUB is the same number as that stored in 
counter 23062. In response, I AD2 remains in a high logic state such that counter 
23062 is not updated. Compare circuit 1206o,i, however, determines that PSUBo is 
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less than the logic one stored in memory element 23140,1. Since the control signal 
is high on match line segment 12100,1, compare circuit 1206o,i discharges IAD1 
such that the priority number 001 stored in counter 2306i will be incremented. 
After a sufficient amount of time has passed such that all of the bit comparisons 
5 have had time to resolve, the UP signal can be asserted such that the priority 
numbers in counters 2306i and 2306o are incremented. For one embodiment, the 
IAD signals can be latched prior to providing the UP signal. Subsequently, 
PNEW can be added to memory 608. 

Any compare circuits may be used for compare circuits 1206 to implement 
10 the process illustrated above. For example, the compare circuits illustrated 
above that implement Table 1 can be used with additional control for the BCT 
ifl control signal. One embodiment of the modified circuit of Figure 14 is shown in 

p Figure 37. In Figure 37, transistor 1416 is included in series with transistors 1406 

U and 1408 between signal line 1208 n -i and ground. The gate of transistor 1416 is 

|4 15 controlled by BCT via inverter 1420. A similar modification can be made to any 
|« of the other embodiments of the compare circuits 2314. OR gate 1418 is one 

iJ; embodiment of logic 3302. 

While Figure 36 shows an embodiment of inserting a new priority number 
S into memory 608, the priority numbers can be decremented for a delete function 

20 by asserting the DOWN signal after all of the IAD signals are resolved. 

The embodiment of Figure 35 can also insert and delete priority numbers 
assigned in descending priority order. Figure 38 shows such an example with of 
a 3x3 matrix in which row 0 stores priority number 111 having the decimal 
equivalent of the number 7, row 1 stores priority number 110 having the decimal 
25 equivalent of the number 6, and row 2 stores priority number 101 having the 
decimal equivalent of the number 5. Thus, 111 is the most significant priority 
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number, 110 is the next most significant priority number, and 101 is the least 
significant priority number. 

When a new policy statement having a new priority number PNEW 110 is 
to be loaded into CAM array 604, BCT is asserted to a high logic state, control 
5 signals on match line segments 12102,2, 12102,1/ and 12102,o are asserted to a high 
logic state, and priority logic elements 120l2-1201o compare PSUB 111 (PNEW 
incremented by 1) with their corresponding priority numbers stored in counters 
23062-23060, respectively. Priority logic 12012 determines that 111 is equal to 
PSUB; priority logic 1201i determines that 110 is less than PSUB; and priority 
10 logic 1201o determines that 101 is less than PSUB. Priority logic 12012 leaves 

unchanged the priority number stored in counter 23062. Circuits 1201i and 1201o 

G 

iQ cause counters 2306i and 2306o to decrement by one their existing priority 

q numbers. The new policy statement and PNEW can then be loaded into CAM 

jl' array 604 and priority memory 608, respectively. 

t2 15 The comparisons of the most significant bit PSUB2 with the most 

:L significant bits stored in counters 23062-2306o are resolved first. Wlien an 

;~ individual compare circuit determines that its corresponding memory storage 

^ element stores the same logic state as the PSUB bit, the compare circuit leaves the 

; A control signal of the next match line segment unaffected such that it has the same 

20 logical state of the previous match line segment. Since each of memory storage 
elements 23142,2, 23142,1, and 23142,0 store a logic one and PSUB2 is a logic one, the 
control signals on match line segments 12101,2, 1210i,i, and 1210i,o remain 
asserted to a high logic state. 

The comparison of the next most significant bit PSUBi with priority 
25 number bits stored in memory elements 2314i,o, 2314i,i and 2314i,2 is then 

resolved. Since memory elements 2314i,2 and 2314i,i store the same logic states as 
PSUBi, the control signals on match line segments 1210o,2and 1210o,i remain in a 
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high logic state. Compare circuit 12061,0, however, determines that the priority 
number stored in counter 2306o is less than PSUB because: (1) memory element 

23141.0 stores a logic zero; (2) match line segment 12101,0 is a high logic state; and 
(3) PSUBi is a logic one on signal line 1208i. When compare circuit 1206i,o makes 

5 this determination, it discharges match line segment 1210o,o to a low logic state. 
When a match line segment is discharged to a low logic state, all subsequent 
match line segments in that row are discharged such that IAD for that row is 
discharged to a low logic state. When IAD is a low logic state, the counter 
associated with that row will be decremented when DOWN is asserted. Thus, 

10 IADo will cause counter 2306o to be decremented when DOWN is asserted. 

Lastly, the comparison of the least significant bit PSUBo with priority 
number bits stored in memory elements 2314o,o, 2314o,i and 2314o,2is resolved. As 
indicated above, priority logic 1201o has already determined that 101 is less than 
111 and thus IADo remains discharged to a low logic state. Since the control 

15 signal on match line segment 1210o,2 is in a high logic state, compare circuit 

12060.1 compares the logic one stored in memory element 2314o,2 with the logic 
one of PSUBo, and determines that PSUB is the same number as that stored in 
counter 23062. In response, IAD2 remains in a high logic state such that counter 
23062 is not updated. Compare circuit 1206o,i, however, determines that PSUBo is 

20 greater than the logic zero stored in memory element 2314o,i. Since the control 
signal is asserted on match line segment 1210o,i, compare circuit 1206o,i 
discharges IAD1 such that the priority number 110 stored in counter 2306i will be 
decremented. After a sufficient amount of time has passed such that all of the 
bit comparisons have had time to resolve, the DOWN signal can be asserted such 

25 that the priority numbers in counters 2306i and 2306o are decremented. For one 
embodiment, the IAD signals can be latched prior to providing the DOWN 
signal. Subsequently, PNEW can be added to memory 608. 
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Any compare circuits may be used for compare circuits 1206 to implement 
the process illustrated in Figure 38. For example, the compare circuits illustrated 
above that implement Table 3 can be used with additional control for the BCT 
control signal as illustrated in Figure 37. While Figure 38 shows an embodiment 
5 of inserting a new priority number into memory 608, the priority numbers can be 
incremented for a delete function by asserting the UP signal after all of the IAD 
signals are resolved. 

DSP 602 can perform the updating functions described above with respect 
to Figures 17-38 asynchronously or synchronously. When DSP 602 operates 

10 synchronously, it receives a clock signal that may be used to clock in the policy 
search key and an instruction that causes the updating functions to be performed 
by DSP 602. DSP 602 may implement the updating functions in one or more 
clock cycles. 

Depth Cascading DSP Devices 

15 As described above, DSP 602 stores policy statements in CAM array 604 

and identifies the highest priority matching policy statement without having to 
presort or prearrange the policy statements in the CAM array. DSP 602 may also 
be included in a system that has multiple DSPs connected in a depth cascade 
configuration that expands the number of memory locations in CAM array 604 

20 and priority memory 608 to accommodate more policy statements and their 
associated priority numbers. 

Figure 39 shows a CAM system 3900 that includes three DSPs 3902, 3904, 
and 3906 interconnected in a depth cascade configuration. Policy statements 
may be arbitrarily stored in DSPs 3902-3906 without initially presorting or 

25 prearranging the statements. When a classification or filtering operation, such as 
that described in Figure 7, is performed by each of the DSPs in system 3900, the 
DSP that stores the highest priority matching statement for system 3900, as a 
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whole, may be determined as will be described in more detail below. The DSP 
that includes the highest priority matching statement for system 3900 may be 
determined regardless of the number of CAM locations filled or occupied in each 
CAM array of each DSP (i.e., regardless of whether one or more CAM arrays of 
5 DSPs 3902-3906 is full, empty, or partially full). 

Any number of DSPs may be depth cascaded as shown in Figure 39. The 
total memory size of system 3900 is larger than the individual memory sizes of 
each of the CAM arrays in each DSP 3902-3906. For example, if each CAM array 
is a 16k x 144 bit CAM array, then system 3900 may operate as a DSP that 
10 includes a 48k x 144 bit CAM array. Any other size of CAM arrays may be used. 
Also, CAM arrays of different widths may be depth cascaded together. 

tisaa. 

y 

; n Additionally, system 3900 may be formed from stand-alone DSPs, or may be 

q formed from integrated circuits on a common substrate. 

j^V Each DSP receives in parallel a clock signal CLK, policy statements and 

^ 15 priority numbers on data bus DBUS, and instructions on instruction bus IBUS. 
^ For alternative embodiments, the policy statements and priority numbers may be 

jD provided on different buses. Other input signals may also be simultaneously 

U! provided to each of DSPs 3902-3906 including word enable signals, reset signals, 

\Q chip enable signals, and the like. DSPs 3902-3906 also output their external 

20 address signal to a common HPM bus. When performing the classification 
function of Figure 7, the DSP that has the highest priority matching policy 
statement will take control of the HPM bus. Each DSP 3902-3906 may include 
any of the embodiments of DSP 602 described above. 

DSPs 3902-3906 may each include a cascade down input /CDI, a cascade 
25 down output /CDO, a cascade up input /CUI, a cascade up output /CUO, 
priority number down inputs PNDI, priority number down outputs PNDO, 
priority number up inputs PNUI, and priority number up outputs PNUO. The 
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PNDO and PNUO outputs provide the most significant priority number PNUM 
generated by the priority logic in each priority index table in each of DSP 3902- 
3906. The cascade up and down outputs provide signals that indicate when 
PNUM is valid on the PNDO and PNUO outputs. For other embodiments, the 
5 cascade inputs and outputs may be omitted and CLK or match flag up and down 
signals may be used to validate the PNUM outputs. For an alternative 
embodiment match flag up and down signals generated by flag logic coupled to 
CAM array 604 may be used to validate the PNUM outputs. Additional outputs 
or inputs such as full flag up and down pins may also be included. 
10 Each CAM DSP generally has its /CDO output coupled to the /CDI input 

of the next DSP, its /CUO output coupled to the /CUI of the previous DSP, its 

:J3 /CDI input coupled to the /CDO of the previous DSP, its /CUI input coupled to 

□ the /CUO of the next DSP, its PNDO outputs coupled to the PNDI inputs of the 

next DSP, its PNDI inputs coupled to the PNDO outputs of the previous DSP, its 

l5 15 PNUI inputs coupled to the PNUO outputs of the next DSP, and its PNUO 

jU outputs coupled to the PNUI inputs of the previous DSP. 

;~ DSP 3902 may be designated as the DSP that has the lowest logical system 

! _ : 

addresses by connecting its / CDI input to ground, and its PNDI inputs to VDD. 
B For another embodiment, the PNDI inputs may be connected to ground and/ or 

20 the /CDI inputs of DSP 3902 may be connected to VDD. DSP 3902 has the lowest 

logical or numerical addresses of, for example, zero to N-l. DSP 3904 has logical 

addresses N to M-l, and DSP 3906 has logical addresses M to W-l, where system 

3900 has a total of W ternary CAM words available for storing policy statements. 

DSP 3906 may be designated as the last DSP in the cascade by connecting its 
25 PNUI inputs to VDD, and its /CUI input to ground. For another embodiment, 

the PNUI inputs of DSP 3906 may be connected to ground, and/ or the /CUI 

input may be connect to VDD. 
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The operation of system 3900 for implementing the classification or 
filtering function of Figure 7 is as follows. Initially, one or more of DSPs 3902- 
3906 is loaded with policy statements and corresponding priority numbers. In 
response to an instruction provided on the IBUS and the policy search key 
5 provided on the DBUS, each DSP 3902-3906 compares the policy search key with 
the policy statements stored in its CAM array 604 (step 702). The priority logic in 
each priority index table identifies its most significant priority number PNUM 
associated with one of its matching policy statements. Each DSP also determines 
the address of its PNUM in its priority memory 608 (steps 706 and 708). Each 
10 DSP then compares the priority numbers provided on its PNDI and PNUI pins 
with its own PNUM to determine whether it has a more significant priority 

n 

\q number. If a DSP has a more significant or equal priority number than that 

□ provided on its PNUI pins, then the DSP outputs its own PNUM to its PNUO 

j'^ pins. If, however, a DSP has a lower priority PNUM than those provided on the 

^ 15 PNUI pins, then the DSP outputs the priority number from its PNUI pins to its 
JL% PNUO pins. Similarly, if a DSP has a more significant priority number than that 

!^ provided on its PNDI pins, then the DSP outputs its own PNUM to its PNDO 

^ pins. If, however, a DSP has an equal or lower priority PNUM than those 

C ! provided on the PNDI pins, then the DSP outputs the priority number from its 

20 PNDI pins to its PNDO pins. 

By simultaneously providing and comparing priority numbers both down 
and up through system 3900, each DSP will ultimately determine whether it has 
the most significant priority number in the entire system. When a device has the 
most significant priority number for the system, it may take control of the HPM 
25 bus and output address information to access a location in route memory 614. 
For this embodiment, route memory 614 is as deep as the number of CAM 
memory location in system 3900. 
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Each of DSPs 3902-3906 can also update their own policy statement tables 
and priority memories as needed in response to an insertion or deletion 
instruction provided to system 3900. A new policy statement and priority 
number, for example, may be loaded into the DSP that has the next free address 
5 of system 3900 as determined by full flag signals (not shown). 

Figure 40 shows DSP 4000 that is one embodiment of DSPs 3902-3906. 
DSP 4000 is any of the embodiments of DSP 602 that further includes cascade 
logic 4004, output buffer 4002, instruction decoder 4006, read and write (R/ W) 
circuits 4008 and 4010, and flag logic 4016. DSP 4000 may also include registers to 
10 store the policy statements and priority numbers prior to use by CAM array 604 
and priority index table 606. Cascade logic 4004 is coupled to the /CDI, / CUI, 
S PNDI, and PNUI inputs, and to the /CDO, /CUO, PNDO, and PNUO outputs. 

q For another embodiment, the cascade inputs and outputs (i.e., / CDI, /CDO, 

jlz /CUI, and / CUO) may be omitted and thus not coupled to cascade logic 4004. 

15 Cascade logic 4004 may also receive and output match flag and full flag cascade 
signals. 

* pi 

; Cascade logic 4004 receives a search signal SCH on line 4012 from 

instruction decoder 4006 indicating that the classification or filtering operation 

i i 

••2X1 

; S will be performed by DSP 4000. Cascade logic 4004 may also receive a match flag 

20 signal /MF from flag logic 4016 indicating whether CAM array 604 has an 
address that matches a policy search key. Cascade logic 4004 compares the 
priority number on its PNDI inputs with its own most significant priority 
number PNUM from priority index table 606, and outputs the more significant 
number from among these two priority numbers to its PNDO outputs. Similarly, 
25 cascade logic 4004 compares the priority number on its PNUI inputs with its own 
PNUM, and outputs the more significant number from among these two priority 
numbers to its PNUO outputs. If DSP 4000 has the most significant priority 
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number for the entire system 3900, then it asserts its output buffer control signal 
OBCNTL on signal line 4014 to enable output buffer 4002 to take control of the 
HPM bus. 

Figure 41 is a block diagram of cascade logic 4100 that is one embodiment 
5 of cascade logic 4004 of Figure 40. Cascade logic 4100 includes cascade down 
logic 4104 and cascade up logic 4102. Cascade down logic 4104 generates signals 
for the /CDO and PNDO outputs in response to /CDI, PNDI inputs, and SCH. 
Cascade up logic 4102 generates signals on the / CUO and PNUO outputs in 
response to /CUI, PNUI inputs, and SCH. Other embodiments of cascade logic 
10 4004 may be used. For example, match flag signals may be used. 
_ Cascade down logic 4104 includes signal generator 4106 and compare 

*0 circuit 4110. Signal generator 4106 receives CLK and SCH from instruction 

□ decoder 4006. SCH indicates that the classification of filtering function is to be 
jl* performed by DSP 4000. Signal generator 4106 asserts / CDO to a low logic state 

□ 15 after / CDI is asserted to a low logic state and when the priority number on the 
j«i PNDO outputs is valid. Signal generator 4106 may be any logic circuit that 

if; performs this function. For an alternative embodiment, SCH may be omitted and 

;t? signal generator 4106 may generate / CDO in response to CLK only. Compare 

^ circuit 4110 compares the internal most significant priority number PNUM with 

20 the priority number from the PNDI inputs. If the priority number on the PNDI 
inputs is equal to or more significant than PNUM, then compare circuit 4110 
outputs the priority number from its PNDI inputs to its PNDO outputs and 
asserts signal line 4116 to a low logic state. If, however, PNUM is more 
significant than the priority number on the PNDI inputs, then compare circuit 
25 4110 outputs PNUM to its PNDO outputs and asserts line 4116 to a high logic 
state. 
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Cascade up logic 4102 includes signal generator 4108 and compare circuit 
4112. Signal generator 4108 receives CLK and SCH from instruction decoder 
4006. Signal generator 4108 asserts /CUO to a low logic state after / CUI is 
asserted to a low logic state and when the priority number oh the PNUO outputs 
is valid. Signal generator 4108 may be any logic circuit that performs this 
function. For an alternative embodiment, SCH may be omitted and signal 
generator 4108 may generate /CUO in response to CLK only. Compare circuit 
4112 compares PNUM with the priority number from the PNUI inputs. If the 
priority number on its PNUI inputs is more significant than PNUM, then 
compare circuit 4112 outputs the priority number from its PNUI inputs to its 
PNUO outputs and asserts signal line 4118 to a low logic state. If, however, 
PNUM is equal to or more significant than the priority number on its PNUI 
inputs, then compare circuit 4112 outputs PNUM to the PNUO outputs and 
asserts line 4118 to a high logic state. When signal lines 4116 and 4118 are both at 
high logic states, AND gate 4114 asserts OBCNTL on line 4014 to a high state to 
enable output buffer 4002 to take control of the HPM bus. 

For an alternative embodiment in which the cascade inputs (/ CDI and 
/CUI) and cascade outputs (/ CDO and / CUO) are omitted, signal generators 
4106 and 4108 may also be omitted. For yet another embodiment in which 
multiple /CDI-/ CDO and /CUI-/ CUO pins are included, multiple pairs of 
signal generators may also be included, and/ or match flag signals may be 
included. 

Classless Inter Domain Routing (CIDR) 

DSP 602 can also be used to process Internet Protocol (IP) packets that use 
the Classless Inter Domain Routing (CIDR) scheme. With CIDR, an IP address 
has a generalized network prefix of a particular number bits of 32-bit IPv4 or a 
128-bit IPv6 address. The network prefix or mask indicates the number of left- 
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most contiguous bits in the IP address that are used to filter an IP address in a 
routing table. That is, the network prefix indicates the number of higher-order or 
left-most contiguous bits in the IP address that participate in an address 
comparison with the routing table. 
5 Conventional ternary CAM devices such as CAM 300 of Figure 3 can store 

the IP addresses in rows 305, and their corresponding prefixes in rows 310. 
Routing information associated with a particular IP address is loaded into a 
corresponding address location in route memory 308. Due to the operation of 
priority encoder 306, IP addresses are generally presorted or prearranged prior 

10 to entry into a CAM device such that the IP address with the longest network 
prefix is located in the lowest logical address of the CAM array, and the IP 
address with the shortest network prefix is located in the highest logical address 
of the CAM array. When the IP addresses are presorted, a search on the CAM 
array for a particular IP address will identify the IP address that has the longest 

15 corresponding prefix, that is, will identify the best match. 

A considerable amount of time is generally required to prearrange all of 
the CIDR address entries prior to loading the entries into a CAM device. 
Additionally, a considerable amount of time and overhead is also generally 
required to maintain the order of the routing table when entries are deleted or 

20 overwritten, or when new entries are to be added. Other architectures have been 
proposed that increase the size of the CAM array by adding additional logic in 
the CAM array itself and another match coupled to the rows of mask cells. 

DSP 602 of Figure 6 can be used to process IP addresses without adding 
additional logic or signal lines to ternary CAM array 604. IP addresses can be 

25 loaded into CAM cell rows 605, and the corresponding decoded prefix data can 
be loaded into mask rows 607. Decoding logic can be provided in DSP 602 to 
decode the prefix number. Additionally, the prefix data is encoded into a binary 
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number and stored in corresponding locations in priority memory 608. Encoding 
logic can be provided in DSP 602 to encode the prefix number into a binary (or 
other code) number. 

When a search is performed for the IP address with the longest prefix, all 
matching locations in CAM array 604 will assert their corresponding match lines 
MLo-MLn-i. Priority logic 610 then compares, with each other, the encoded 
prefix numbers associated with the matching IP address. Priority logic 610 
identifies the most significant encoded prefix number (i.e., the highest prefix 
number), and identifies its location in priority memory 608 to IADo-IADn-i. The 
encoded most significant prefix number may also be output from DSP 600. 
Encoder 612 then encodes the identified location into an address for output to 
HPM bus 616. The corresponding route information can then be accessed in 
route memory 614. As in the previous embodiments described above, route 
memory 614 may also be included within DSP 602. 

For another embodiment, there may more than one identical most 
significant priority numbers identified by priority logic 610. For this 
embodiment, encoder 612 may be a conventional priority encoder that 
determines which address to output based on a predetermined priority (i.e., 
based on logical address locations). 

DSP 602 can process the CIDR based IP addresses without preloading the 
IP addresses in the CAM array in a predetermined order. Additionally, new IP 
address may be added at the next free address or any other designated address 
in CAM array 604 without reordering or reloading the CAM array. This can 
reduce the hardware and/ or software needed for table management of the CAM 
array, and can increase the performance of a router incorporating the DSP. 

The operation of DSP 602 for processing CIDR based IP addresses can be 
illustrated by the example of Figure 42. In Figure 42, ternary CAM array 604 has 
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IP address 168.0.0.0/8 stored at location 604o, 168.69.0.0/16 stored at location 
604i, and 168.69.62.0/24 stored at location 6042. For this embodiment, each IP 
address is stored in array 604 as four eight-bit binary numbers. Also for this 
embodiment when the decoded prefix data is a logic zero it does not mask the 
corresponding bits of the IP address. Priority memory 608 stores the prefixes 8, 
16, and 24 at locations 608o, 608i, and 6082, and the corresponding routing 
information Rio, RIi, and RI2 are stored at locations 614o, 614i, and 6142 of route 
memory 614. 

A search key of 168.69.43.100 is provided to CAM array 604, and the IP 
address with the best match (i.e., the longest prefix data) is determined as 
follows. When the search key is compare with the IP addresses, 168.69.0.0/16 
and 168.0.0.0/8 are both identified as matches and MLo and MLi asserted. 
Between these two IP addresses, 168.69.0.0/16 is the best match as it has a longer 
prefix. Priority logic 610 compares the prefixes 16 and 8 stored at locations 6O80 
and 6O81 and determines that 16 is greater than 8. The priority logic outputs 16 
as the longest matching prefix to PNUM, and also identifies location 6O81 by 
asserting IADi. Encoder 612 then encodes IADo-IADn-i and generates an address 
of 1 on HPM bus 616 to access route information RIi in route memory 614. 

Any of the embodiments of DSP 602 described above can be used to 
implement priority logic 610 to process CIDR based IP addresses and their prefix 
numbers. Additionally, multiple DSPs can be depth cascaded as described in 
Figures 39-41 to implement a system that provides a sufficient number of CAM 
array locations for storing IP addresses. 

In the foregoing specification the invention has been described with 
reference to specific exemplary embodiments thereof. It will, however, be 
evident that various modifications and changes may be made thereto without 
departing from the broader spirit and scope of the invention. The specification 
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and drawings are, accordingly, to be regarded in an illustrative rather than 
restrictive sense. 
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